← Back

Eggjs

eggjs

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Egg Scripts
egg-scripts
1 CVE
Extend2
extend2
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-23568
1Eggjs
1Extend2
Jun 17, 2026
Jan 10, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge.
CVE-2018-3786
1Eggjs
1Egg Scripts
Nov 21, 2024
Aug 24, 2018
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument.