sonatype-2021-1696 | Security Details | Sonatype Guide
sonatype-2021-1696
coa, rc - Malicious Packages November 4, 2021
Published Nov 4, 2021
CVSS Score
Critical
10.0
Security Details
Components Impacted
Security Details
CVE ID: sonatype-2021-1696
CWE: N/A
CVE Description: coa, rc - Malicious Packages November 4, 2021
Published: Nov 4, 2021
CVSS Score & Severity
10.0 Critical
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score: 0%
Malware
malware
KEV Status
Not in KEV Catalog: No known exploits
Affected Ecosystems
affected
Source
Sonatype
References
- GitHub · Issue #131 PROJECT
- GitHub · Issue #99 PROJECT
- GitHub · Advisory · GHSA-73qr-pfmq-6rp8 THIRD_PARTY