Search vulnerabilities

Results 2

Export CSV
CVE-2022-1929

Exponential ReDoS in devcert

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2020-8186

A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function.

CVSS 3.1 · 9.8 Critical EPSS 2.8% KEV · Not listed
Vendors
Products