Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Devcert Project Clear all filters
TI-2022-01788 CVE-2022-1929 · GHSA-fp36-299x-pwmw

Exponential ReDoS in devcert

Priority LOW 34

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00641 Published 2022-06-01 Fixed in 1.2.1 CWE-1333
TI-2020-06604 CVE-2020-8186 · GHSA-4228-7qvx-f4rq

Command injection in devcert

Priority MEDIUM 47

A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02774 Published 2020-07-10 Fixed in 1.1.2 CWE-77