- How many CVEs does ljharb have?
- ljharb has 15 published CVE records since 2017, including 10 in the last two years.
- How many ljharb CVEs are in CISA KEV?
- None of ljharb's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which ljharb products have the most CVEs?
- The ljharb products with the most published CVEs are qs, shell-quote, js-traverse, ljharb/npm-lockfile, npm-lockfile.
- What are the most common weakness types in ljharb CVEs?
- ljharb's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-20 (Improper Input Validation), CWE-1321 (Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')), CWE-248 (Uncaught Exception).
- Are there public exploits for ljharb vulnerabilities?
- Yes — 10 of ljharb's CVEs have a known public exploit.
- How many critical ljharb vulnerabilities are there?
- ljharb has 5 critical and 3 high-severity CVEs.
- What is the average severity of ljharb CVEs?
- The average CVSS base score across ljharb's scored CVEs is 7.8.