Scancode Io

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-40024 PyPI MEDIUM POC PATCH This Month

ScanCode.io is a server to script and automate software composition analysis pipelines. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Scancode Io

NVD GitHub

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-39523 PyPI HIGH POC PATCH This Week

ScanCode.io is a server to script and automate software composition analysis with ScanPipe pipelines. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Command Injection Docker Scancode Io

NVD GitHub

CVSS 3.1

8.8

EPSS

2.4%

CVE-2023-40024 PyPI

EPSS 0% CVSS 6.1

MEDIUM POC PATCH This Month

XSS Scancode Io

NVD GitHub

CVE-2023-39523 PyPI

EPSS 2% CVSS 8.8

HIGH POC PATCH This Week

Command Injection Docker Scancode Io

NVD GitHub