Skip to content
OpenAdvisories

Package · npm

raneto

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2022-35142

    Raneto Denial of Service via crafted payload injected into `Search` parameter

    An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter.

    raneto npm
  • Critical 9.8
    CVE-2022-35143

    Raneto v0.17.0 employs weak password complexity requirements

    Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force attacks.

    raneto npm
  • Medium 4.8
    CVE-2022-35144

    Raneto vulnerable to Cross-site Scripting

    Renato v0.17.0 was discovered to contain a cross-site scripting (XSS) vulnerability.

    raneto npm