← All advisories

Critical severity9.8NVD Advisory· Published Aug 17, 2018· Updated Jun 17, 2026

CVE-2018-3784

CVE-2018-3784

Description

A code injection in cryo 0.0.6 allows an attacker to arbitrarily execute code due to insecure implementation of deserialization.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
cryonpm	<= 0.0.6	—

Affected products

3

Cryo Project/Cryo
cpe:2.3:o:cryo_project:cryo:0.0.6:*:*:*:*:node.js:*:*
ghsa-coords
pkg:npm/cryo
Range: <= 0.0.6
Https://GitHub.com/hunterloftis/Cryov5
Range: Not fixed

Patches

Vulnerability mechanics

References

4

hackerone.com/reports/350418nvdExploitIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-38f5-ghc2-fcmvghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-3784ghsaADVISORY
www.npmjs.com/advisories/690ghsaWEB

News mentions

0

No linked articles in our index yet.