cofeescript project vulnerabilities
Recent CVEs affecting cofeescript project products. 1 tracked.
cofeescript project has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-06-07. Highest priority: CVE-2017-16202 (score 48/100).
- CVE-2017-16202 HIGH 7.5 DOWNGRADE The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third
FAQ
How do I fix cofeescript project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cofeescript project being exploited right now?
None of the tracked cofeescript project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cofeescript project CVE should I patch first?
CVE-2017-16202 currently ranks highest (48/100): The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third.