Known vulnerabilities in Linaro Automated Validation Architecture (LAVA)

Vendor: Linaro Limited
Software: Linaro Automated Validation Architecture (LAVA)
Software CPE: cpe:2.3:a:linaro:lava:*:*:*:*:*:*:*:*
Website: https://www.lavasoftware.org/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Linaro Automated Validation Architecture (LAVA) Linaro Automated Validation Architecture (LAVA) is affected by 3 known vulnerabilities: 2 high, 1 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71186 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45132		 CWE-94 High
No
No
 2022.11.1 16.01.2023 SB2023011620
#VU71184 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2022-44641		 CWE-776 Medium
No
No
 2022.11 16.01.2023 SB2023011620
SB2023011631
#VU71183 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42902		 CWE-94 High
No
No
 2022.10 16.01.2023 SB2023011619
SB2023011630