Vulnerabilities
Summary — last 7 days
New vulnerabilities4,551▼ 828 vs. last week
Critical / high1,776▼ 1,328 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)761▲ 663 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.5) | 2.3% | PoC | Kind-of Project Kind-of | 12/30/2019 | 6/17/2026 | ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result. |