Vulnerabilities > IS Http2 Project

DATE	CVE	VULNERABILITY TITLE	RISK
2023-02-01	CVE-2022-25906	OS Command Injection vulnerability in Is-Http2 Project Is-Http2 All versions of the package is-http2 are vulnerable to Command Injection due to missing input sanitization or other checks, and sandboxes being employed to the isH2 function. local low complexity is-http2-project CWE-78	7.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.

Vulnerabilities > IS Http2 Project {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"IS Http2 Project"}]}

Vulnerabilities > IS Http2 Project