Read the docs

Utils-extend Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Utils-extend Project records in CISA KEV

No Utils-extend Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Utils-extend 1 record MEDIUM

Records

1 record

TI-2020-06565 CVE-2020-8147 · GHSA-6pq3-928q-x6w6

Improper input validation in utils-extend

Priority MEDIUM 48

Flaw in input validation in npm package utils-extend version 1.0.8 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using utils-extend.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03149 Published 2020-04-03 No fix listed CWE-471
Open these records in search →