PR
Product
proxygen
On CISA KEVExploited in the wild
11
CVEs
1
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 3High 6Medium 2Low 0
Watch
Add proxygen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1897 | 9.8 | May 18 | A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence Affected: before 2020.05.18.00 |
| CVE-2019-11940 | 9.8 | Dec 4 | In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place the header table into a corrupted state, leading… Affected: 0.29.0 through 2017.04.03.00 |
| CVE-2019-11921 | 9.8 | Jul 25 | An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper handling of Base64 when parsing malformed binary content in… Affected: before 2019.07.22.00 |
Showing 3
