CyberSecBulletin

Tomphttp vulnerabilities

We track 1 vulnerability in Tomphttp products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2024.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Tomphttp vulnerabilities

  • 9.8 Critical severity

    bare-server-node: Inconsistent Interpretation of HTTP Requests

    CVE-2024-27922Tomphttp

    TOMP Bare Server implements the TompHTTP bare server. A vulnerability in versions prior to 2.0.2 relates to insecure handling of HTTP requests by the @tomphttp/bare-server-node package. This flaw potentially exposes the users of the package to manipulation of