GR
Product
Graalvm
On CISA KEVExploited in the wild
196
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 57Medium 86Low 47
Watch
Add Graalvm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22931 | 9.8 | Aug 16 | Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name… Affected: 20.3.3; 21.2.0 |
| CVE-2021-29921 | 9.8 | May 6 | In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string Affected: 20.3.2; 21.1.0 |
| CVE-2020-7774 | 9.8 | Nov 17 | The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution Affected: 19.3.5; 20.3.1.2; 21.0.0.2 |
| CVE-2019-15606 | 9.8 | Feb 7 | Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons Affected: 19.3.1; 20.0.0 |
| CVE-2019-15605 | 9.8 | Feb 7 | HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed Affected: 19.3.1; 20.0.0 |
| CVE-2019-17560 | 9.1 | Mar 30 | The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads Affected: 19.3.2; 20.1.0 |
Showing 6