@evershop/evershop vulnerabilities (npm)
12 vulnerabilities.
-
@evershop/evershopnpm evershop allows unauthenticated attackers to force server to initiate HTTP request via "GET /images" API 6.5 Medium -
@evershop/evershopnpm evershop allows unauthenticated attackers to exhaust application server's resources via "GET /images" API 7.5 High -
@evershop/evershopnpm EverShop Order Order.resolvers.js resource injection 6.3 Medium -
@evershop/evershopnpm EverShop at risk to unauthorized access via weak HMAC secret 9.1 Critical -
@evershop/evershopnpm EverShop vulnerable to improper authorization in GraphQL endpoints 7.5 High -
@evershop/evershopnpm Cross-site Scripting in evershop 6.1 Medium -
@evershop/evershopnpm Code execution in evershop 9.8 Critical -
@evershop/evershopnpm Directory Traversal in evershop 5.4 Medium -
@evershop/evershopnpm Directory Traversal in evershop 8.3 High -
@evershop/evershopnpm Cross-site Scripting in evershop 6.1 Medium -
@evershop/evershopnpm Cross Site Scripting in evershop 6.1 Medium -
@evershop/evershopnpm Directory Traversal in evershop 5.3 Medium