Login Request a demo
JA
Product
Jan
by Homebrew · last CVE Jun 4, 2024
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 2High 1Medium 0Low 0
Severity
All severities3Critical2High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jan to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-37273
9.8
1%
Jun 4
An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file
Affected: 0.4.12
CVE-2024-36858
9.8
3%
Jun 4
An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file
Affected: 0.4.12
Showing 2