raneto
npm3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting ranetopage 1 of 1
- CVE-2022-35142HIGHCVSS 7.5EG 7.5✓ Fixed in 0.17.12022-08-04
An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter.
- CVE-2022-35143CRITICALCVSS 9.8EG 9.8✓ Fixed in 0.17.12022-08-04
Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force attacks.
- CVE-2022-35144MEDIUMCVSS 4.8EG 4.8✓ Fixed in 0.17.12022-08-04
Renato v0.17.0 was discovered to contain a cross-site scripting (XSS) vulnerability.
Check whether raneto is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for raneto CVEs against the assets you own.
Start Free Scan →