Crcn vulnerabilities
We track 1 vulnerability in Crcn products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Crcn vulnerabilities
- 8.1 High severity
sift.js: Improperly Controlled Modification of Object Prototype Attributes
sift (sift.js) 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any matched operator key including $where. The $where operation compiles a string value into a function using new Function unless CSP_ENABLED is s