2021-09-11

2021-09-12

2021-09-13

CVE-2021-23440 CRITICAL POC PATCH Act Now

This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Memory Corruption Authentication Bypass Set Value Communications Cloud Native Core Policy

NVD GitHub

CVSS 3.1

9.8

EPSS

2.5%

CVE-2021-23435 MEDIUM PATCH This Month

This affects the package clearance before 2.5.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Open Redirect vulnerability could allow attackers to redirect users to malicious websites via URL manipulation.

Open Redirect Clearance

NVD GitHub

CVSS 3.1

6.1

EPSS

0.7%