Hekto Project Hekto — known CVE vulnerabilities

Every CVE whose affected-product data names Hekto Project Hekto, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-3725 — CVSS 7.5 (high): hekto node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read…
• CVE-2018-3743 — CVSS 6.1 (medium): Open redirect in hekto <=0.2.3 when target domain name is used as html filename on server.