HH
Product
HHVM
40
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 25High 13Medium 2Low 0
Watch
Add HHVM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-6332 | 5.9 | Dec 3 | A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources Affected: through 3.21.7; 3.24.3 |
| CVE-2016-1000109 | 5.3 | Feb 19 | HHVM does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the… Affected: before 3.9.6; 3.10.0 through 3.12.4; 3.13.0 through 3.14.2 |
Showing 2