CVE-2022-28355: scala-js scala.js – CVSS 7.5 · Watchpost

← All vulnerabilities

CVE-2022-28355

높음 7.5CVE-2022-28355 · Published 02/04/2022 · updated 17/06/2026

요약

CVE-2022-28355은(는) scala.js (scala-js)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.4%, 전체 취약점의 73.2%보다 높음.
조치: 1.10.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
scala.js scala-js	`< 1.10.0`	`1.10.0`

Description

randomUUID in Scala.js before 1.10.0 generates predictable values.

References

scala-js/scala-js · Issue Tracking
scala-js/scala-js release · Release Notes
scala-js/scala-js security advisory · Mitigation
scala-js.org/news/2022/04/04/announcing-scalajs-1.10.0 · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free