davewasmer/devcert

Releases35

Frequency3 months 4 days

Last Release5 months ago

Stars1.31K

Local HTTPS development made easy

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2022-1929NVD↗	< 1.2.1	Jun 2, 2022Thursday, 2 June 2022, 14:15	5.9 MEDIUM	5 MEDIUM
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method
CVE-2020-8186NVD↗	= 1.1.0, < 1.1.2	Jul 10, 2020Friday, 10 July 2020, 16:15	9.8 CRITICAL	7.5 HIGH
A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function.