Vulnerabilities
Summary — last 7 days
New vulnerabilities5,495▲ 2,247 vs. last week
Critical / high2,824▲ 1,268 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)610▲ 401 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.5) | 0.50% | — | Zxcvbn-ts Project Zxcvbn-ts | 6/7/2023 | 6/17/2026 | zxcvbn-ts is an open source password strength estimator written in typescript. This vulnerability affects users running on the nodeJS platform which are using the second argument of the zxcvbn function. It can result in an unbounded resource consumption as the user inputs array is extended with every function call.… |