Vulnerabilities
Summary — last 7 days
New vulnerabilities4,965▲ 164 vs. last week
Critical / high2,071▼ 686 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)804▲ 741 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (8.2) | 0.77% | — | Rangy Project Rangy | 2/24/2023 | 6/17/2026 | All versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-core.js.The function uses recursive merge which can lead an attacker to modify properties of the Object.prototype |