Tiny-csrf Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Tiny-csrf Project records in CISA KEV

No Tiny-csrf Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Tiny-csrf · all components

TI-2022-18663 CVE-2022-39287 · GHSA-pj2c-h76w-vv6f

LOW 38

tiny-csrf is a Node.js cross site request forgery (CSRF) protection middleware.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.0052 Published 2022-10-07 Fixed in 1.1.0 CWE-319