Advisories · Technology
misp-stix.
Every CVE that names misp-stix among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
Cross-Document Parser State Contamination in misp-stix
- misp-stix
- CWE-459
- CVSS 8.7 High
Denial of Service in MISP-STIX Import via Malformed or Oversized STIX Documents in misp-stix library
- misp-stix
- Denial of service
- CVSS 8.8 High
Path Traversal in MISP Object Template Resolution During STIX Import and Export in misp-stix library
- misp-stix
- Path traversal
- CVSS 6.9 Medium
STIX2 Parser Confusion and Mass Assignment Allow Unauthorized MISP Attribute Metadata Injection in misp-stix library
- misp-stix
- CWE-20