| Package | Affected versions | Patched versions |
|---|---|---|
| vestcert | ≥ 2.3.6, < 2.5.30 | 2.5.30 |
In Yettiesoft VestCert versions 2.36 to 2.5.29, a vulnerability exists due to improper validation of third-party modules. This allows malicious actors to load arbitrary third-party modules, leading to remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free