CVE-2017-16225CWE-200

CVE-2017-16225: vulnerability in HackerOne aegir node module

Published · Updated

Follow this CVE+ Monitor aegir node module+ Monitor aegir

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
aegir is a module to help automate JavaScript project management. Version 12.0.0 through and including 12.0.7 bundled and published to npm the user (that performed a aegir-release) GitHub token.
Affected products
HackerOne · aegir node module