excon project records
2 published records for vendor excon project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-201 Insertion of Sensitive Information Into Sent Data1
- CWE-664 Improper Control of a Resource Through its Lifetime1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
26Monitor | CVE-2026-54171No exploit | Excon: redact additional sensitive/risky headers when following redirectsexcon project · excon · CWE-201 | Medium6.5 | — | 0.4% | Jul 17, 2026 |
23Monitor | CVE-2019-16779No exploit | In RubyGem excon, interrupted Persistent Connections May Leak Response Dataexcon project · excon · CWE-664 | Medium5.9 | — | 1.6% | Dec 16, 2019 |
- CVE-2026-5417126Monitor
Excon: redact additional sensitive/risky headers when following redirects
MediumCVSS 6.5No exploitEPSS 0%excon project · exconJul 17, 2026
- CVE-2019-1677923Monitor
In RubyGem excon, interrupted Persistent Connections May Leak Response Data
MediumCVSS 5.9No exploitEPSS 1%excon project · exconDec 16, 2019