github.com/arduino/arduino-create-agent (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package github.com/arduino/arduino-create-agent, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2023-43800 — CVSS 7.3 (high): Arduino Create Agent is a package to help manage Arduino development. The vulnerability affects the endpoint `/v2/pkgs/tools/installed`. A…
• CVE-2023-43802 — CVSS 7.1 (high): Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/upload` which handles…
• CVE-2023-43801 — CVSS 6.1 (medium): Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/tools/installed`…
• CVE-2023-43803 — CVSS 6.1 (medium): Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/tools/installed`…