Skip to content
OpenAdvisories

Package · npm

devcert

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.9
    CVE-2022-1929

    Exponential ReDoS in devcert

    An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method

    devcert devcert devcert npm
  • Critical 9.8
    CVE-2020-8186

    Injection and Command Injection in devcert

    A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function.

    devcert npm