tooljet tooljet

Name: tooljet tooljet
Brand: tooljet

productUS

cpe:2.3:a:tooljet:tooljet:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical6high5medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-23067US	medium6.8	1.31% (70th)	—	no fix	2022-05-18	0.5.0 → 1.2.2
CVE-2022-2631US	high8.8	1.19% (68th)	—	1.19.0	2022-08-02	< 1.19.0
CVE-2022-2037US	high8.0	1.14% (66th)	—	1.16.0	2022-06-09	< 1.16.0
CVE-2022-3348US	medium4.9	1.07% (65th)	—	2022-09-11	2022-09-28	< 2022-09-11
CVE-2022-27978US	high7.5	1.03% (64th)	—	no fix	2023-04-26	= 1.6
CVE-2022-3422US	high7.5	1.01% (63rd)	—	1.26.1	2022-10-07	< 1.26.1
CVE-2022-3019US	high8.8	1.00% (63rd)	—	1.23.0	2022-08-29	< 1.23.0
CVE-2022-4111US	medium6.5	0.82% (57th)	—	1.27.0	2022-11-22	< 1.27.0
CVE-2022-23068US	medium5.4	0.61% (49th)	—	no fix	2022-05-18	0.6.0 → 1.10.2
CVE-2022-27979US	medium5.4	0.47% (41st)	—	no fix	2023-04-26	= 1.6.0
CVE-2026-54344US	high8.8	0.36% (30th)	—	3.20.180	2026-07-08	< 3.20.180

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-1125Excessive Attack Surface1 CVEs
CWE-1284Improper Validation of Specified Quantity in Input1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-639Authorization Bypass Through User-Controlled Key1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.