# CVEs published 2022-02-05

3 CVEs were published on February 5, 2022: 0 critical, 1 high. Days are UTC.

- [CVE-2021-38172](https://cve.now/CVE-2021-38172.md): perM 0.4.0 has a Buffer Overflow related to strncpy. (no CVSS)
- [CVE-2022-0501](https://cve.now/CVE-2022-0501.md): Cross-site Scripting (XSS) - Reflected in ptrofimov/beanstalk\_console (CVSS 8.6, ptrofimov/beanstalk\_console)
- [CVE-2022-0437](https://cve.now/CVE-2022-0437.md): Cross-site Scripting (XSS) - DOM in karma-runner/karma (CVSS 5.4, karma-runner/karma · karma)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-02-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.