Количество 3
Количество 3
CVE-2013-4660
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation.
CVE-2013-4660
The JS-YAML module before 2.0.5 for Node.js parses input without prope ...
GHSA-xxvw-45rp-3mj2
Deserialization Code Execution in js-yaml
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2013-4660 The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation. | CVSS2: 6.8 | 17% Средний | около 13 лет назад |
| CVE-2013-4660 The JS-YAML module before 2.0.5 for Node.js parses input without prope ... | CVSS2: 6.8 | 17% Средний | около 13 лет назад |
| GHSA-xxvw-45rp-3mj2 Deserialization Code Execution in js-yaml | 17% Средний | почти 9 лет назад |
Уязвимостей на страницу