CVE-2022-38545: Valine.js Valine

Critical severity, CVSS 9.6. EPSS: 34.1% chance of exploitation in the next 30 days.

Valine v1.4.18 was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute arbitrary code via a crafted POST request.

Affected products

• Valine.js Valine: version 1.4.18 only

Published 2022-09-19. Last modified 2026-06-17.