agoric records
3 published records for vendor agoric.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 33.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')2
- CWE-20 Improper Input Validation1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2021-23594No exploit | All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.agoric · realms-shim · CWE-1321 | Critical10.0 | — | 1.7% | Jan 10, 2022 |
40Plan | CVE-2021-23543No exploit | All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.agoric · realms-shim · CWE-1321 | Critical9.8 | — | 1.7% | Jan 10, 2022 |
39Monitor | CVE-2023-39532No exploit | SES's dynamic import and spread operator provides possible path to arbitrary exfiltration and executionagoric · ses · CWE-20 | Critical9.8 | — | 1.3% | Aug 8, 2023 |
- CVE-2021-2359441Plan
All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.
CriticalCVSS 10.0No exploitEPSS 1%agoric · realms-shimJan 10, 2022
- CVE-2021-2354340Plan
All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.
CriticalCVSS 9.8No exploitEPSS 1%agoric · realms-shimJan 10, 2022
- CVE-2023-3953239Monitor
SES's dynamic import and spread operator provides possible path to arbitrary exfiltration and execution
CriticalCVSS 9.8No exploitEPSS 1%agoric · sesAug 8, 2023