Tiny-csrf Project Tiny-csrf — known CVE vulnerabilities

Every CVE whose affected-product data names Tiny-csrf Project Tiny-csrf, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2022-39287 — CVSS 8.1 (high): tiny-csrf is a Node.js cross site request forgery (CSRF) protection middleware. In versions prior to 1.1.0 cookies were not encrypted and…