CyberSecBulletin

Lilconfig vulnerabilities

We track 1 vulnerability in Lilconfig products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2024.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Lilconfig vulnerabilities

  • 8.8 High severity

    lilconfig: Improper Control of Generation of Code

    CVE-2024-21537LilconfigEPSS 1.13%

    Versions of the package lilconfig from 3.1.0 and before 3.1.1 are vulnerable to Arbitrary Code Execution due to the insecure usage of eval in the dynamicImport function. An attacker can exploit this vulnerability by passing a malicious input through the defaul