PatchTheCVEconvos vulnerabilities
Recent CVEs affecting convos products. 3 tracked.
convos has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-01-04. Highest priority: CVE-2022-21649 (score 47/100).
- CVE-2022-21650 HIGH 7.6 UPGRADE Convos is an open source multi-user chat that runs in a web browser
- CVE-2022-21649 HIGH 7.6 UPGRADE Convos is an open source multi-user chat that runs in a web browser
- CVE-2021-42584 MEDIUM 5.4 UPGRADE A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32.
FAQ
How do I fix convos vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is convos being exploited right now?
None of the tracked convos CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which convos CVE should I patch first?
CVE-2022-21649 currently ranks highest (47/100): Convos is an open source multi-user chat that runs in a web browser.