nuget package report

Is org.apache.guacamole:guacamole-common safe?

1 known vulnerability, worst severity HIGH.

cvss

7.5

how bad it is if exploited, out of 10

epss

2.1%

chance of exploitation in the next 30 days

xyz score

3.4

CyberXYZ composite, out of 10

fig. 01 — GHSA-wr7r-vg3c-54r5, the advisory selected below

// advisories

GHSA-wr7r-vg3c-54r5

HIGHCVE-2018-1340

Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token. This cookie lacked the "secure" flag, which could allow an attacker eavesdropping on the network to intercept the user's session token if unencrypted HTTP requests are made to the same domain.

Affected: < 1.0.0
Fixed in: 1.0.0
Published: 2022-05-13
Source: github

GHSA NVD MITRE reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so nuget packages are not covered.

Checked 2026-09-22 at 01:53 UTC. The most recent advisory here was published 2022-05-13. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is org.apache.guacamole:guacamole-common safe? nuget package security report | CyberXYZ