Vagrant.js Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Vagrant.js Project records in CISA KEV

No Vagrant.js Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2022-09488 CVE-2022-25962 · GHSA-54jw-jqr9-6cj9

HIGH 76

All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input sanitization.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01015 Published 2023-01-25 No fix listed CWE-78