BO
Product
Bootstrap OS
On CISA KEVExploited in the wildRansomware-linked
57
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 21Medium 25Low 7
Watch
Add Bootstrap OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21211 | 3.7 | Oct 15 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler) Affected: All versions, or not specified |
| CVE-2022-35252 | 3.7 | Sep 23 | When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server… Affected: All versions, or not specified |
| CVE-2022-21443 | 3.7 | Apr 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2024-2004 | 3.5 | Mar 27 | Usage of disabled protocol Affected: All versions, or not specified |
| CVE-2025-0167 | 3.4 | Feb 5 | netrc and default credential leak Affected: All versions, or not specified |
| CVE-2024-11053 | 3.4 | Dec 11 | netrc and redirect credential leak Affected: All versions, or not specified |
| CVE-2021-36086 | 3.3 | Jul 1 | The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list) Affected: All versions, or not specified |