Vendors / unjs Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now unjs records in CISA KEV No unjs vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 81
nanotar through 0.2.0 has a path traversal vulnerability in parseTar() and parseTarGzip() that allows remote attackers to write arbitrary files outside the intended extraction directory via a crafted tar archive containi…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00929 · Published 2026-02-11 · No fix listed CWE-22
Priority HIGH 70
IPX is an image optimizer powered by sharp and svgo.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00792 · Published 2025-08-05 · Fixed in 1.3.2, 2.1.1 +1 CWE-22
Priority HIGH 66
Unhead is a document head and template manager.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00268 · Published 2026-03-12 · Fixed in 2.1.11 CWE-79
Priority MEDIUM 60
Unhead is a document head and template manager.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00296 · Published 2026-04-09 · Fixed in 2.1.13 CWE-184
Priority MEDIUM 57
Unhead is a document head and template manager.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00292 · Published 2026-03-12 · Fixed in 2.1.11 CWE-79
Priority LOW 39
defu is software that allows uers to assign default properties recursively.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00405 · Published 2026-04-06 · Fixed in 6.1.5 CWE-1321
Open these records in search → All records by CVSS severity
1 1 4 0 0
