PatchTheCVEmosca vulnerabilities and fixes
Recent CVEs affecting mosca, with upgrade or downgrade steps. 1 tracked.
mosca has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-08-30. Highest priority: CVE-2018-11615 (score 53/100).
- CVE-2018-11615 HIGH 7.5 DOWNGRADE This vulnerability allows remote attackers to deny service on vulnerable installations of npm mosca 2.8.1
FAQ
How do I fix mosca vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mosca being exploited right now?
None of the tracked mosca CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mosca CVE should I patch first?
CVE-2018-11615 currently ranks highest (53/100): This vulnerability allows remote attackers to deny service on vulnerable installations of npm mosca 2.8.1.