Skip to content

fix: replace CWE category entries with proper weakness CWEs #18

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tmendo merged 1 commit into from
Oct 6, 2026
Merged

fix: replace CWE category entries with proper weakness CWEs #18

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions angularjs-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: AngularJS library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions axios-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Axios library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions backbone-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Backbone library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions bootstrap-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Bootstrap library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions browser-content-sniffing-allowed.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Browser content sniffing allowed
severity: low
cvss-score: 4.7
cvss-vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
cwe-id: CWE-16
cwe-name: Configuration
cwe-id: CWE-693
cwe-name: Protection Mechanism Failure
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions certificate-with-insufficient-key-size-or-usage-or-insecure-signature-algorithm.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Certificate with insufficient key size or usage, or insecure signature alg
severity: low
cvss-score: 4.2
cvss-vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-310
cwe-name: Cryptographic Issues
cwe-id: CWE-326
cwe-name: Inadequate Encryption Strength
correlatable: SAST
compliance:
HIPAA: 164.306(a), 164.312(c)(1), 164.312(e)(1)
Expand Down
4 changes: 2 additions & 2 deletions certificate-without-revocation-information.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Certificate without revocation information
severity: low
cvss-score: 5.3
cvss-vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
cwe-id: CWE-16
cwe-name: Configuration
cwe-id: CWE-299
cwe-name: Improper Check for Certificate Revocation
compliance:
HIPAA: 164.306(a), 164.312(c)(1), 164.312(e)(1)
ISO 27001: A.5.14, A.8.9, A.8.24
Expand Down
4 changes: 2 additions & 2 deletions chartjs-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Chart.js library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions ckeditor-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: CKEditor library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions cookie-without-httponly-flag.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Cookie without HttpOnly flag
severity: low
cvss-score: 3.1
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
cwe-id: CWE-16
cwe-name: Configuration
cwe-id: CWE-1004
cwe-name: Sensitive Cookie Without 'HttpOnly' Flag
correlatable: SAST
compliance:
HIPAA: 164.306(a)
Expand Down
4 changes: 2 additions & 2 deletions dojo-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Dojo library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions dompurify-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: DOMPurify library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions drupal-version-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Drupal version with known vulnerabilities
severity: high
cvss-score: 9.1
cvss-vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions dwr-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: DWR library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions easyxdm-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: easyXDM library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions ember-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Ember library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions ext-js-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Ext JS library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions flowplayer-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Flowplayer library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions froala-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Froala library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions handlebars-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Handlebars library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions highcharts-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Highcharts library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions http-trace-method-enabled.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: HTTP TRACE method enabled
severity: low
cvss-score: 3.7
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
cwe-id: CWE-16
cwe-name: Configuration
cwe-id: CWE-693
cwe-name: Protection Mechanism Failure
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions insecure-browser-xss-protection-enabled.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Insecure browser XSS protection enabled
severity: low
cvss-score: 4.7
cvss-vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
cwe-id: CWE-16
cwe-name: Configuration
cwe-id: CWE-693
cwe-name: Protection Mechanism Failure
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions joomla-version-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Joomla! version with known vulnerabilities
severity: high
cvss-score: 9.1
cvss-vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions jplayer-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: jPlayer library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions jquery-file-upload-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: jQuery File Upload library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions jquery-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: JQuery library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
correlatable: SAST
compliance:
HIPAA: 164.306(a)
Expand Down
4 changes: 2 additions & 2 deletions jquery-migrate-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: JQuery Migrate library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
correlatable: SAST
compliance:
HIPAA: 164.306(a)
Expand Down
4 changes: 2 additions & 2 deletions jquery-mobile-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: JQuery Mobile library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
correlatable: SAST
compliance:
HIPAA: 164.306(a)
Expand Down
4 changes: 2 additions & 2 deletions jquery-ui-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: jQuery UI library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
correlatable: SAST
compliance:
HIPAA: 164.306(a)
Expand Down
4 changes: 2 additions & 2 deletions jszip-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: JSZip library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions knockout-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Knockout library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions lodash-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Lodash library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions mathjax-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: MathJax library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions momentjs-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Moment.js library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
4 changes: 2 additions & 2 deletions mustache-library-with-known-vulnerabilities.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ name: Mustache library with known vulnerabilities
severity: low
cvss-score: 4.8
cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
cwe-id: CWE-1035
cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
cwe-id: CWE-1395
cwe-name: Dependency on Vulnerable Third-Party Component
compliance:
HIPAA: 164.306(a)
ISO 27001: A.8.9
Expand Down
Loading
Loading