MediumCVSS 6.1
EPSS 1.4%
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware
Product
debian/node-connect vulnerabilities
2 published CVES affecting debian/node-connect, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest debian/node-connect CVEs
Newest publication first
-
-
MediumCVSS 5.4
connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.