VYPR

Planet

by Planet

CVEs (2)

  • CVE-2024-52558MedDec 6, 2024
    risk 0.34cvss 5.3epss 0.01

    The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to crash the program.

  • CVE-2023-32303MedMay 12, 2023
    risk 0.27cvss 5.2epss 0.00

    Planet is software that provides satellite data. The secret file stores the user's Planet API authentication information. It should only be accessible by the user, but before version 2.0.1, its permissions allowed the user's group and non-group to read the file as well. This…