Skip to main content
cve.nowby Sazabi
← npm
npmPackage

buttercup

1 known vulnerability, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1
Registry
npm

Advisories 1

  • Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/

    Affected: from 2.20.3, fixed in 7.4.0.