What is CVE-2022-41957?

CVE-2022-41957 is a high-severity vulnerability in Julianhille Muhammarajs, classified under CWE-690. CVSS score: 7.5/10. Published 2022-11-28.

How severe is CVE-2022-41957?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Julianhille Muhammarajs

CVE-2022-41957

Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. The package muhammara before 2.6.2 and from 3.0.0 and before 3.3.0, as well as all versions of muhammara's predecessor package hummus, are v…

EPSS: 0.004 (63.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Julianhille Muhammarajs — versions < 2.6.2, >= 3.0.0, < 3.4.0

Weakness classification (CWE)

CWE-690

References

github.com/julianhille/MuhammaraJS/security/advisories/GHSA-2r7v-cmch-5x26
github.com/julianhille/MuhammaraJS/pull/235
github.com/julianhille/MuhammaraJS/pull/238

Frequently asked questions

What is CVE-2022-41957?: CVE-2022-41957 is a high-severity vulnerability in Julianhille Muhammarajs, classified under CWE-690. CVSS score: 7.5/10. Published 2022-11-28.
How severe is CVE-2022-41957?: High severity. CVSS v3 base score is 7.5 out of 10.