Skip to content
OpenAdvisories

Product · CVEProject

cve-services

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2022-31004

    Potential secrets being logged to disk in CVE Services

    CVEProject/cve-services is an open source project used to operate the CVE services API. A conditional in 'data.js' has potential for production secrets to be written to disk. The affected method writes the generated randomKey to disk if the environment is not…

    CVEProject cve-services