PatchTheCVEdnt vulnerabilities
Recent CVEs affecting dnt products. 2 tracked.
dnt has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-02-04. Highest priority: CVE-2019-10787 (score 67/100).
- CVE-2019-10788 CRITICAL 9.8 UPGRADE im-metadata through 3.0.1 allows remote attackers to execute arbitrary commands via the "exec" argument
- CVE-2019-10787 CRITICAL 9.8 UPGRADE im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument
FAQ
How do I fix dnt vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dnt being exploited right now?
None of the tracked dnt CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dnt CVE should I patch first?
CVE-2019-10787 currently ranks highest (67/100): im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument.