FAIL › dossier

jpress vendor

failure events

zero-days

RCEs

on KEV

critical

worst shame

Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.

Failure history 2 events

Date	Event	Sev	Flags	Shame	Summary
2022-01-13	CVE-2021-45807	critical	⚡RCE	50	jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall.
2022-01-13	CVE-2021-45807	critical	⚡RCE	50	jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall.

Sentiment · trusted sources

synthesis severe-fallout -0.80

CVE-2021-45807 is a critical RCE vulnerability in jpress v4.2.0, confirmed by NVD and CISA KEV, indicating severe security failure.
cooey ↗ severe-fallout -0.90

Critical RCE vulnerability confirmed

“jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall.”
app.opencve.io ↗ severe-fallout -0.50

Vulnerability listed in CVE database

“CVEs and Security Vulnerabilities - OpenCVE”
www.cvefind.com ↗ severe-fallout -0.50

Vulnerability tracked in CVE database

“Database CVE, CWE, CISA KEV & Vulnerability Intelligence | CVE Find”
dailysecurityreview.com ↗ severe-fallout +0.00

Irrelevant to jpress vulnerability

“U.S. Judiciary Confirms Breach Of Federal Court Electronic Records System”
www.theguardian.com ↗ severe-fallout +0.00

Irrelevant to jpress vulnerability

“news stories faked to lure victims to scam”
chromereleases.googleblog.com ↗ severe-fallout +0.00

Irrelevant to jpress vulnerability

“Chrome Releases”
cvefeed.io ↗ severe-fallout -0.50

Vulnerability tracked in CISA KEV

“CISA Known Exploited Vulnerabilities (KEV) catalog is the authoritative list of security flaws that have been confirmed exploited in real-world attacks.”