Skip to content

Vendor

reduce-css-calc project vulnerabilities

1 published CVE affecting reduce-css-calc project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of reduce-css-calc project alerts

Products

Latest reduce-css-calc project CVEs

Newest publication first

  1. CVE-2016-10548 Arbitrary Code Injection in reduce-css-calc

    Published
    MediumCVSS 6.1 EPSS 1.2%

    Arbitrary code execution is possible in reduce-css-calc node module <=1.2.4 through crafted css. This makes cross sites scripting (XSS) possible on the client and arbitrary code injection possible on the server and user input is passed to the calc function.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.