Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
U-root records in CISA KEVNo U-root vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 36
This affects all versions of package github.com/u-root/u-root/pkg/tarutil.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0183 · Published 2020-09-01 · Fixed in 0.9.0 CWE-22
Priority LOW 36
This affects all versions of package github.com/u-root/u-root/pkg/cpio.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01527 · Published 2020-09-01 · No fix listed CWE-22
Priority LOW 36
This affects all versions of package github.com/u-root/u-root/pkg/uzip.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01826 · Published 2020-09-01 · Fixed in 0.9.0 CWE-22
Open these records in search →