Known vulnerabilities in dgs-framework
Vendor:
Netflix
Software:
dgs-framework
Software CPE:
cpe:2.3:a:Netflix:dgs-framework:*:*:*:*:*:*:*:*
Website:
https://github.com/Netflix
Total vulnerabilities:
4
Public exploits:
2
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
12.0.1
12.0.0
10.6.0
11.1.0
10.5.0
11.0.0
10.4.0
10.3.0
10.2.4
10.2.3
10.2.2
10.2.1
10.2.0
10.1.2
10.1.1
10.1.0
10.0.4
10.0.3
10.0.2
10.0.1
10.0.0
9.2.2
9.2.1
9.2.0
9.1.3
9.1.2
9.1.1
9.1.0
9.0.4
9.0.3
9.0.2
9.0.1
9.0.0
8.7.1
8.7.0
8.6.3
8.6.2
8.6.1
8.6.0
8.5.8
8.5.7
8.5.6
8.5.5
8.5.4
8.5.3
8.5.2
8.5.0
5.6.2
8.4.4
8.4.3
8.4.2
8.4.1
8.4.0
8.3.1
8.3.0
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.1
8.1.0
8.0.3
8.0.2
8.0.1
5.6.1
5.6.0
8.0.0
7.6.0
7.5.4
7.5.3
7.5.2
7.5.1
7.5.0
7.4.0
5.5.5
7.3.6
7.3.5
7.3.4
5.5.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.0
7.1.0
7.0.0
6.0.5
6.0.4
5.5.3
6.0.3
5.5.2
6.0.2
6.0.1
6.0.0
5.5.1
5.5.0
5.4.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4.0
5.3.0
5.2.4
5.2.2
5.2.1
5.1.1
5.1.0
5.0.5
5.0.4
4.10.5
5.0.3
5.0.2
5.0.1
5.0.0
4.10.4
4.10.3
4.10.2
4.10.1
4.10.0
4.9.25
4.9.24
4.9.23
4.9.22
4.9.21
4.9.20
4.9.19
4.9.18
4.9.17
4.9.16
4.9.15
4.9.14
4.9.13
4.9.12
4.9.11
4.9.10
4.9.7
4.9.6
4.9.5
4.9.4
4.9.3
4.9.2
4.9.1
4.9.0
4.8.3
4.8.2
4.8.1
4.8.0
4.7.6
4.7.5
4.7.4
4.7.3
4.7.2
4.7.1
4.7.0
4.6.0
4.5.1
4.5.0
4.4.0
4.3.2
4.3.1
4.3.0
4.2.0
4.1.0
4.0.1
4.0.0
3.12.1
3.12.0
3.11.0
3.10.2
3.10.1
3.10.0
3.9.3
3.9.2
3.9.1
3.9.0
3.8.2
3.8.1
3.8.0
3.7.1
3.7.0
3.6.0
3.5.2
3.5.1
3.5.0
3.4.1
3.4.0
3.3.0
3.2.0
3.1.2
3.1.1
3.1.0
3.0.11
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU63758 - Cross-Site Request Forgery (CSRF) |
CWE-352 | Low | 5.0.0 | 27.05.2022 |
SB2022052706 |
||
| #VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832 |
CWE-94 | Medium | 4.9.16 | 28.12.2021 |
SB2021122816 SB2021123002 SB2022010601 and 197 more |
||
| #VU58976 - Improper Control of Generation of Code ('Code Injection') CVE-2021-45046 |
CWE-94 | High | 4.9.14 | 15.12.2021 |
SB2021121504 SB2021121511 SB2021121512 and 178 more |
||
| #VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228 |
CWE-94 | Critical | 4.9.11 | 10.12.2021 |
SB2021121003 SB2021121101 SB2021121201 and 338 more |