VYPR

Jsreport

by Jsreport

Source repositories

CVEs (2)

  • CVE-2020-8128CriFeb 14, 2020
    risk 0.64cvss 9.8epss 0.03

    An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code.

  • CVE-2023-2583CriMay 8, 2023
    risk 0.58cvss 10.0epss 0.01

    Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3.