Skip to content

Vendor

js-given project vulnerabilities

1 published CVE affecting js-given project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of js-given project alerts

Products

Latest js-given project CVEs

Newest publication first

  1. CVE-2016-10638 Downloads Resources over HTTP in js-given

    Published
    HighCVSS 8.1 EPSS 1.7%

    js-given is a JavaScript frontend to jgiven. js-given downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.