Skip to content

Vendor

lambdaisland vulnerabilities

1 published CVE affecting lambdaisland, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of lambdaisland alerts

Products

Latest lambdaisland CVEs

Newest publication first

  1. CVE-2023-28628 `authority-regex` returns the wrong authority in lambdaisland/uri

    Published
    MediumCVSS 6.1 EPSS 0.55%

    lambdaisland/uri is a pure Clojure/ClojureScript URI library. In versions prior to 1.14.120 authority-regex allows an attacker to send malicious URLs to be parsed by the lambdaisland/uri and return the wrong authority. This issue is similar to but distinct from CVE-2020-8910. The...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.