duktape vulnerabilities and fixes
Recent CVEs affecting duktape, with upgrade or downgrade steps. 1 tracked.
duktape has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-01-20. Highest priority: CVE-2021-46322 (score 37/100).
- CVE-2021-46322 MEDIUM 5.5 DOWNGRADE Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component duk_push_tval in duktape/duk
FAQ
How do I fix duktape vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is duktape being exploited right now?
None of the tracked duktape CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which duktape CVE should I patch first?
CVE-2021-46322 currently ranks highest (37/100): Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component duk_push_tval in duktape/duk.