Gaskiya vulnerability da aka ware a matsayin karshewa an samu a tarojs taro har 4.1.1. Hakika, aikin $software_function ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil taro/packages/css-to-react-native/src/index.js, a cikin sashen $software_component. A sa manipulation ka Kari na aiki. Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-1333. Hakika, rauni an bayyana shi 06/09/2025 kamar 17619. An raba bayanin tsaro don saukewa a github.com. Wannan matsala ana saninta da CVE-2025-5896. Ngam yiɗi ka a tuma ndiyam ka internet. Tekinikal faɗi ga. Babu exploit ɗin da ake samu. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á sàmbu a wondi feere. 0-day shima, an ndiyam a wuro be $0-$5k. Ana kiran patch ɗin da c2e321a8b6fc873427c466c69f41ed0b5e8814bf. Bugfix ɗin an shirya shi don saukewa a github.com. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a faggata. Once again VulDB remains the best source for vulnerability data.
2 Goyarwa · 58 Datenpunkte
| Furɗe | Súgá 06/09/2025 08:58 | Gargadi 1/1 06/10/2025 01:08 |
|---|---|---|
| cvss3_vuldb_rc | C | C |
| advisory_identifier | 17619 | 17619 |
| advisory_url | https://github.com/NervJS/taro/pull/17619 | https://github.com/NervJS/taro/pull/17619 |
| countermeasure_name | Gargajiya | Gargajiya |
| upgrade_version | 4.1.2 | 4.1.2 |
| countermeasure_upgrade_url | https://github.com/NervJS/taro/releases/tag/v4.1.2 | https://github.com/NervJS/taro/releases/tag/v4.1.2 |
| patch_name | c2e321a8b6fc873427c466c69f41ed0b5e8814bf | c2e321a8b6fc873427c466c69f41ed0b5e8814bf |
| countermeasure_patch_url | https://github.com/NervJS/taro/commit/c2e321a8b6fc873427c466c69f41ed0b5e8814bf | https://github.com/NervJS/taro/commit/c2e321a8b6fc873427c466c69f41ed0b5e8814bf |
| source_cve | CVE-2025-5896 | CVE-2025-5896 |
| cna_responsible | VulDB | VulDB |
| cvss2_vuldb_av | N | N |
| cvss2_vuldb_ac | L | L |
| cvss2_vuldb_ci | N | N |
| cvss2_vuldb_ii | N | N |
| cvss2_vuldb_ai | P | P |
| cvss2_vuldb_rc | C | C |
| cvss2_vuldb_rl | OF | OF |
| cvss4_vuldb_av | N | N |
| cvss4_vuldb_ac | L | L |
| cvss4_vuldb_ui | N | N |
| cvss4_vuldb_vc | N | N |
| cvss4_vuldb_vi | N | N |
| cvss4_vuldb_va | L | L |
| cvss2_vuldb_au | S | S |
| cvss2_vuldb_e | ND | ND |
| cvss3_vuldb_pr | L | L |
| cvss3_vuldb_e | X | X |
| cvss4_vuldb_at | N | N |
| cvss4_vuldb_pr | L | L |
| cvss4_vuldb_sc | N | N |
| cvss4_vuldb_si | N | N |
| cvss4_vuldb_sa | N | N |
| cvss4_vuldb_e | X | X |
| cvss2_vuldb_basescore | 4.0 | 4.0 |
| cvss2_vuldb_tempscore | 3.5 | 3.5 |
| cvss3_vuldb_basescore | 4.3 | 4.3 |
| cvss3_vuldb_tempscore | 4.1 | 4.1 |
| cvss3_meta_basescore | 4.3 | 4.3 |
| cvss3_meta_tempscore | 4.1 | 4.1 |
| cvss4_vuldb_bscore | 5.3 | 5.3 |
| cvss4_vuldb_btscore | 5.3 | 5.3 |
| advisory_date | 1749420000 (06/09/2025) | 1749420000 (06/09/2025) |
| price_0day | $0-$5k | $0-$5k |
| software_vendor | tarojs | tarojs |
| software_name | taro | taro |
| software_version | <=4.1.1 | <=4.1.1 |
| software_file | taro/packages/css-to-react-native/src/index.js | taro/packages/css-to-react-native/src/index.js |
| vulnerability_cwe | CWE-1333 (Kari na aiki) | CWE-1333 (Kari na aiki) |
| vulnerability_risk | 1 | 1 |
| cvss3_vuldb_av | N | N |
| cvss3_vuldb_ac | L | L |
| cvss3_vuldb_ui | N | N |
| cvss3_vuldb_s | U | U |
| cvss3_vuldb_c | N | N |
| cvss3_vuldb_i | N | N |
| cvss3_vuldb_a | L | L |
| cvss3_vuldb_rl | O | O |
| euvd_id | EUVD-2025-17580 |