CH
Vendor
Chef
6
CVEs
0
On KEV
0
New 30D
Products
AU8.8
Automate
Chef
3 CVEs0 on KEV0 new
CH7.5
Chef
Chef
1 CVEs0 on KEV0 new
CM9.8
Chef Manage
Chef
1 CVEs0 on KEV0 new
IN7.8
Inspec
Chef
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-8868 | AU Automate Chef | 8.8 | Sep 29 | Chef Automate compliance service SQL Injection Vulnerability |
| CVE-2025-6724 | AU Automate Chef | 8.8 | Sep 29 | Chef Automate SQL Injection Vulnerability |
| CVE-2023-42658 | IN Inspec Chef | 7.8 | Oct 31 | InSpec Archive Command Vulnerable to Maliciously Crafted Profile |
| CVE-2023-40050 | AU Automate Chef | 8.8 | Oct 31 | Automate Vulnerable to Malicious Content Uploaded Through Embedded Compliance Application |
| CVE-2015-8559 | CH Chef Chef | 7.5 | Sep 21 | The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages |
| CVE-2016-4326 | CM Chef Manage Chef | 9.8 | Jun 10 | The Chef Manage (formerly opscode-manage) add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie |