Known vulnerabilities in tectonic

Vendor: redhat
Software: tectonic
Software CPE: cpe:2.3::redhat:tectonic:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tectonic tectonic is affected by 2 known vulnerabilities: 1 medium, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30740 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-9090
CWE-79 Low
No
No
1.8.7-tectonic.2 24.09.2019 SB2019092431
#VU31302 - Exposure of sensitive information to an unauthorized actor
CVE-2018-5256
CWE-200 Medium
No
No
1.8.4-tectonic.3 18.05.2018 SB2018051820