npm package report

Is cgi safe?

1 known vulnerability, worst severity HIGH.

cvss

7.5

how bad it is if exploited, out of 10

epss

2.9%

chance of exploitation in the next 30 days

xyz score

3.4

CyberXYZ composite, out of 10

fig. 01 — GHSA-4vf4-qmvg-mh7h, the advisory selected below

// advisories

GHSA-4vf4-qmvg-mh7h

HIGHCVE-2021-41819

CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem prior to versions 0.3.1, 0.2.1, 0.1.1, and 0.1.0.1 for Ruby.

Affected: >=0, <2.6.9, >=2.7.0, <2.7.5, >=3.0.0, <3.0.3
Fixed in: 0.1.0.1
Published: 2022-01-21
Source: github

GHSA NVD MITRE

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so npm packages are not covered.

Checked 2026-09-22 at 01:35 UTC. The most recent advisory here was published 2022-01-21. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is cgi safe? npm package security report | CyberXYZ