Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-7b2x-cc6t-9yc8
Vulnerability ID VCID-7b2x-cc6t-9yc8
Aliases CVE-2017-1000189
GHSA-6x77-rpqf-j6mw
Summary ejs vulnerable to DoS due to weak input validation
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-20 Improper Input Validation
CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 4.7 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000189.json
epss 0.00913 https://api.first.org/data/v1/epss?cve=CVE-2017-1000189
epss 0.00913 https://api.first.org/data/v1/epss?cve=CVE-2017-1000189
epss 0.00913 https://api.first.org/data/v1/epss?cve=CVE-2017-1000189
cvssv3.1 7.5 https://github.com/advisories/GHSA-6x77-rpqf-j6mw
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-6x77-rpqf-j6mw
generic_textual HIGH https://github.com/advisories/GHSA-6x77-rpqf-j6mw
cvssv3.1 7.5 https://github.com/mde/ejs
generic_textual HIGH https://github.com/mde/ejs
cvssv3.1 7.5 https://github.com/mde/ejs/commit/49264e0037e313a0a3e033450b5c184112516d8f
generic_textual HIGH https://github.com/mde/ejs/commit/49264e0037e313a0a3e033450b5c184112516d8f
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2017-1000189
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2017-1000189
cvssv3.1 7.5 https://web.archive.org/web/20171123041449/http://www.securityfocus.com/bid/101893
generic_textual HIGH https://web.archive.org/web/20171123041449/http://www.securityfocus.com/bid/101893
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000189.json
https://api.first.org/data/v1/epss?cve=CVE-2017-1000189
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000189
https://github.com/mde/ejs
https://github.com/mde/ejs/commit/49264e0037e313a0a3e033450b5c184112516d8f
https://web.archive.org/web/20171123041449/http://www.securityfocus.com/bid/101893
http://www.securityfocus.com/bid/101893
1404188 https://bugzilla.redhat.com/show_bug.cgi?id=1404188
CVE-2017-1000189 https://nvd.nist.gov/vuln/detail/CVE-2017-1000189
GHSA-6x77-rpqf-j6mw https://github.com/advisories/GHSA-6x77-rpqf-j6mw
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000189.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/advisories/GHSA-6x77-rpqf-j6mw
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/mde/ejs
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/mde/ejs/commit/49264e0037e313a0a3e033450b5c184112516d8f
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2017-1000189
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://web.archive.org/web/20171123041449/http://www.securityfocus.com/bid/101893
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.76326
EPSS Score 0.00913
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T20:23:59.224888+00:00 GHSA Importer Import https://github.com/advisories/GHSA-6x77-rpqf-j6mw 38.6.0