shepherdwind
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| velocity.js | 2 | – | Aug 13, 2026 |
Exploited and recent CVEs
- CVE-2026-73649 Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of CVE-2026-44966 fix) 0.7%
- CVE-2026-44966 Velocity.js: Prototype Pollution in #set path assignment 0.5%