Config-handler Project Config-handler — known CVE vulnerabilities

Every CVE whose affected-product data names Config-handler Project Config-handler, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2021-23448 — CVSS 6.5 (medium): All versions of package config-handler are vulnerable to Prototype Pollution when loading config files.