Login Request a demo
EC
Product
Eclipse CSI - PIA
by Eclipse Foundation · last CVE Oct 20, 2026
5
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Eclipse CSI - PIA to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-18353
8.8
0%
Jul 30
Unauthenticated SSRF in PIA via OIDC issuer allowlist bypass
Affected: 0.4.0 before 0.6.0
CVE-2026-14336
8.2
0%
Jul 2
PIA's OIDC issuer allowlist for Jenkins tokens uses a bare string-prefix check (issuer.startswith(' https://ci.eclipse.org ') in is_issuer_known, pia/models.py:139) instead of…
Affected: through 0.3.0
Showing 2