# CVEs published 2022-08-13

4 CVEs were published on August 13, 2022: 0 critical, 0 high. Days are UTC.

- [CVE-2022-35954](https://cve.now/CVE-2022-35954.md): Delimiter injection vulnerability in @actions/core exportVariable (CVSS 5.0, actions toolkit · @actions/core)
- [CVE-2022-37401](https://cve.now/CVE-2022-37401.md): Apache OpenOffice Weak Master Keys (no CVSS, Apache Software Foundation Apache OpenOffice)
- [CVE-2022-37400](https://cve.now/CVE-2022-37400.md): Apache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password (no CVSS, Apache Software Foundation Apache OpenOffice)
- [CVE-2022-35948](https://cve.now/CVE-2022-35948.md): CRLF Injection in Nodejs ‘undici’ via Content-Type (CVSS 5.3, nodejs undici · undici)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-08-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.