Known vulnerabilities in Lasso
Vendor:
Entrouvert
Software:
Lasso
Software CPE:
cpe:2.3:a:entrouvert:lasso:*:*:*:*:*:*:*:*
Website:
https://www.entrouvert.com/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU118160 - NULL Pointer Dereference CVE-2025-46404 |
CWE-476 | Medium | 2.6.0 | 06.11.2025 |
SB2025110627 SB2025111275 SB2025111361 and 8 more |
||
| #VU118159 - Reachable Assertion CVE-2025-46705 |
CWE-617 | Medium | 2.6.0, 2.9.0 | 06.11.2025 |
SB2025110623 SB2025110624 SB2025110625 and 12 more |
||
| #VU118158 - Type confusion CVE-2025-47151 |
CWE-843 | High | 2.6.0, 2.9.0 | 06.11.2025 |
SB2025110627 SB2025111275 SB2025111361 and 21 more |
||
| #VU118157 - Missing release of memory after effective lifetime CVE-2025-46784 |
CWE-401 | Medium | 2.6.0 | 06.11.2025 |
SB2025110627 SB2025111361 SB2025111417 and 3 more |
||
| #VU53725 - Improper Privilege Management CVE-2021-28091 |
CWE-269 | Medium | 2.7.0 | 01.06.2021 |
SB2021060144 SB2021060502 SB2021080214 and 7 more |