PatchTheCVEithewei vulnerabilities
Recent CVEs affecting ithewei products. 3 tracked.
ithewei has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-09-29. Highest priority: CVE-2023-26147 (score 38/100).
- CVE-2023-26148 MEDIUM 5.4 MITIGATE All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used t
- CVE-2023-26147 MEDIUM 5.3 MITIGATE All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input
- CVE-2023-26146 MEDIUM 6.1 MITIGATE All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file w
FAQ
How do I fix ithewei vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ithewei being exploited right now?
None of the tracked ithewei CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ithewei CVE should I patch first?
CVE-2023-26147 currently ranks highest (38/100): All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input .