Devcert is a development utility focused on local certificate generation and management, with a narrow product footprint centered on the devcert tool itself. The observed vulnerability pattern reflects command-injection and regular-expression-complexity issues endemic to shell-execution and input-parsing layers in development utilities; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Devcert Project over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-8186CRITICAL A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function. | Jul 10, 2020 | 9.8 | 25 | NO | NO |
CVE-2022-1929HIGH An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor me | Jun 2, 2022 | 7.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Devcert Project.
Media articles that mention a CVE ID that affects a product developed by Devcert Project — matched by CVE ID, not by vendor name.