How many CVEs does adonisjs have?

adonisjs has 8 published CVE records since 2021, including 7 in the last two years.

How many adonisjs CVEs are in CISA KEV?

None of adonisjs's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which adonisjs products have the most CVEs?

The adonisjs products with the most published CVEs are core, @adonisjs/bodyparser, bodyparser, http-server, lucid.

What are the most common weakness types in adonisjs CVEs?

adonisjs's CVEs most often map to these CWE weakness types: CWE-1321 (Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-400 (Uncontrolled Resource Consumption), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).

Are there public exploits for adonisjs vulnerabilities?

Yes — 1 of adonisjs's CVEs have a known public exploit.

How many critical adonisjs vulnerabilities are there?

adonisjs has 1 critical and 4 high-severity CVEs.

What is the average severity of adonisjs CVEs?

The average CVSS base score across adonisjs's scored CVEs is 7.4.

adonisjs Vulnerabilities: CVEs, CISA KEV & Security Advisories

Average CVSS: 7.4
Critical / high: 63%
Actively exploited (KEV): 0%
Public exploit available: 13%
Patch available: 100%

adonisjs Vulnerabilities

Overview

Security scorecard

Severity and exploitation

Most affected products

Common weakness types

CNAs that assign these CVEs

Disclosure activity by year

Latest adonisjs CVEs

Other vendors

Frequently asked questions

References

Track adonisjs vulnerabilities