PatchTheCVEshiba vulnerabilities and fixes
Recent CVEs affecting shiba, with upgrade or downgrade steps. 2 tracked.
shiba has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-10-02. Highest priority: CVE-2020-7738 (score 48/100).
- CVE-2020-7738 HIGH 8.3 MITIGATE All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the funct
- CVE-2017-1000491 MEDIUM 6.1 DOWNGRADE Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enable
FAQ
How do I fix shiba vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is shiba being exploited right now?
None of the tracked shiba CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which shiba CVE should I patch first?
CVE-2020-7738 currently ranks highest (48/100): All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the funct.