Querymen Project Querymen — known CVE vulnerabilities

Every CVE whose affected-product data names Querymen Project Querymen, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-25871 — CVSS 5.9 (medium): All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handler(type, name, fn) can…
• CVE-2020-7600 — CVSS 5.3 (medium): querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be…