PatchTheCVEcofeescript vulnerabilities and fixes
Recent CVEs affecting cofeescript, with upgrade or downgrade steps. 1 tracked.
cofeescript has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-06-07. Highest priority: CVE-2017-16202 (score 48/100).
- CVE-2017-16202 HIGH 7.5 DOWNGRADE The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third
FAQ
How do I fix cofeescript vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cofeescript being exploited right now?
None of the tracked cofeescript CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cofeescript CVE should I patch first?
CVE-2017-16202 currently ranks highest (48/100): The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third.