Csaf-validator-lib Project Csaf-validator-lib — known CVE vulnerabilities

Every CVE whose affected-product data names Csaf-validator-lib Project Csaf-validator-lib, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-47925 — CVSS 7.5 (high): The validate JSON endpoint of the Secvisogram csaf-validator-service in versions < 0.1.0 processes tests with unexpected names. This…
• CVE-2022-47924 — CVSS 6.5 (medium): An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in…