CVE-2021-28091

HIGH7.5EPSS 0.64%

lasso - security update

Published: 6/4/2021Modified: 4/28/2026

Description

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.

Affected packages (3)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References (1)