Known Vulnerabilities for Hello.js by Hello.js Project

Listed below are 2 of the newest known vulnerabilities associated with "Hello.js" by "Hello.js Project".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE	Shortened Description	Severity	Publish Date	Last Modified
CVE-2021-26505 json	Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via ...	9.8 - CRITICAL	2023-08-11	2023-08-16
CVE-2020-7741 json	This affects the package hellojs before 1.18.6. The code get the param oauth_redirect from url and pass it to location.assign...	9.9 - CRITICAL	2020-10-06	2020-10-19

Known Affected Configurations (CPE V2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Hello.js Project	Hello.js	2.0.0-4
Application	Hello.js Project	Hello.js	2.0.0-3
Application	Hello.js Project	Hello.js	2.0.0-2
Application	Hello.js Project	Hello.js	2.0.0-1
Application	Hello.js Project	Hello.js	1.9.9
Application	Hello.js Project	Hello.js	1.9.8
Application	Hello.js Project	Hello.js	1.9.7
Application	Hello.js Project	Hello.js	1.9.6
Application	Hello.js Project	Hello.js	1.9.5
Application	Hello.js Project	Hello.js	1.9.4
Application	Hello.js Project	Hello.js	1.9.3
Application	Hello.js Project	Hello.js	1.9.2
Application	Hello.js Project	Hello.js	1.9.1
Application	Hello.js Project	Hello.js	1.9.0
Application	Hello.js Project	Hello.js	1.8.4
Application	Hello.js Project	Hello.js	1.8.3
Application	Hello.js Project	Hello.js	1.8.2
Application	Hello.js Project	Hello.js	1.8.1
Application	Hello.js Project	Hello.js	1.8.0
Application	Hello.js Project	Hello.js	1.7.5

Results limited to 20 most recent known configurations