PatchTheCVEbluespire vulnerabilities
Recent CVEs affecting bluespire products. 2 tracked.
bluespire has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-09-27. Highest priority: CVE-2021-41097 (score 65/100).
- CVE-2021-41097 CRITICAL 9.1 UPGRADE aurelia-path is part of the Aurelia platform and contains utilities for path manipulation
- CVE-2019-10062 MEDIUM 6.1 UPGRADE The HTMLSanitizer class in html-sanitizer.ts in all released versions of the Aurelia framework 1.x repository
FAQ
How do I fix bluespire vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bluespire being exploited right now?
None of the tracked bluespire CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bluespire CVE should I patch first?
CVE-2021-41097 currently ranks highest (65/100): aurelia-path is part of the Aurelia platform and contains utilities for path manipulation.