Known vulnerabilities in SockJS Client
Vendor:
SockJS
Software:
SockJS Client
Software CPE:
cpe:2.3:a:sockjs:sockjs-client:*:*:*:*:*:*:*:*
Website:
https://github.com/sockjs
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.2
Breakdown by Severity Chart
1.6.1
1.6.0
1.5.2
1.5.1
1.5.0
1.4.0
1.0.1
1.0.0-beta.13
1.0.0-beta.12
1.0.0-beta.11
1.0.0-beta.10
1.0.0-beta.9
1.0.0-beta.8
1.0.0-beta.7
1.0.0-beta.6
1.0.0-beta.5
1.0.0-beta.4
1.0.0-beta.3
1.0.0-beta.2
1.0.0-beta.1
1.0.0
0.3.4
0.3.2
0.3.1
0.3.0
0.2.1
0.2.0
0.1.2
0.1.1
0.1.0
0.0.4
0.0.2
0.0.1
0.0.0-dirty
0.0.0
1.3.0
1.2.0
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.3
1.0.2
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU63777 - Exposure of sensitive information to an unauthorized actor CVE-2022-1650 |
CWE-200 | Medium | 1.6.1 | 30.05.2022 |
SB2022053001 SB2022053002 SB2022061422 and 16 more |
||
| #VU55484 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2021-3664 |
CWE-601 | Low | 1.5.2 | 02.08.2021 |
SB2021080206 SB2021082509 SB2023032938 and 3 more |