CO
Product
compliance-trestle
9
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 2Low 0
Watch
Add compliance-trestle to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45774 | 6.9 | Aug 13 | compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal Affected: < 3.12.2; >= 4.0.0, < 4.0.3 |
| CVE-2026-46380 | 6.7 | Aug 14 | compliance-trestle Vulnerable to SSRF in Remote Fetching Subsystem Affected: >= 4.0.0, < 4.0.3; < 3.12.2 |
Showing 2