Vulnerabilities
Summary — last 7 days
New vulnerabilities5,343▲ 2,492 vs. last week
Critical / high3,000▲ 1,639 vs. last week
New active exploitation (KEV)7▲ 1 vs. last week
Unscored (no CVSS)192▲ 2 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.6) | 0.72% | — | Save-server Project Save-server | 8/4/2020 | 6/17/2026 | save-server (npm package) before version 1.05 is affected by a CSRF vulnerability, as there is no CSRF mitigation (Tokens etc.). The fix introduced in version version 1.05 unintentionally breaks uploading so version v1.0.7 is the fixed version. This is patched by implementing Double submit. The CSRF attack would… |