Every CVE whose affected-product data names Openjsf Serve-index, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2015-8856 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in the serve-index package before 1.6.3 for Node.js allows remote attackers to inject arbitrary…