Acme.sh Project Acme.sh — known CVE vulnerabilities

Every CVE whose affected-product data names Acme.sh Project Acme.sh, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2023-38198 — CVSS 9.8 (critical): acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.