Skip to content

Product

js-given project js-given vulnerabilities

1 published CVE affecting js-given project js-given, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest js-given project js-given CVEs

Newest publication first

  1. CVE-2016-10638 Downloads Resources over HTTP in js-given

    Published
    HighCVSS 8.1 EPSS 1.7%

    js-given is a JavaScript frontend to jgiven. js-given downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.