Known vulnerabilities in pillarjs send
Vendor:
pillarjs
Software:
pillarjs send
Software CPE:
cpe:2.3:a:pillarjs:send:*:*:*:*:*:nodejs:*:*
Website:
https://pillarjs.github.io/
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-43799 |
CWE-79 | Low | 0.19.0 | 30.09.2024 |
SB2024093022 SB2024100824 SB2024100825 and 50 more |
||
| #VU21760 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2014-6394 |
CWE-22 | Medium | 0.8.4 | 14.10.2019 |
SB2014100801 SB2014092410 SB2014092411 and 1 more |