PatchTheCVEmuhammara vulnerabilities and fixes
Recent CVEs affecting muhammara, with upgrade or downgrade steps. 3 tracked.
muhammara has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-11-28. Highest priority: CVE-2022-25885 (score 55/100).
- CVE-2022-41957 HIGH 7.5 UPGRADE MITIGATE Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron
- CVE-2022-25892 HIGH 7.5 UPGRADE The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable
- CVE-2022-25885 HIGH 7.5 UPGRADE The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service (DoS) w
FAQ
How do I fix muhammara vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is muhammara being exploited right now?
None of the tracked muhammara CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which muhammara CVE should I patch first?
CVE-2022-25885 currently ranks highest (55/100): The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service (DoS) w.