Open Source Robotics Foundation
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Robot Operating System (ROS) | 6 | – | Jul 17, 2025 |
| Robot Operating System 2 (ROS 2) | 1 | – | Sep 28, 2026 |
Exploited and recent CVEs
- CVE-2024-42002 Unsafe use of eval() method in ros2 topic hz tool 0.2%
- CVE-2025-3753 Unsafe use of eval() method in rosbag tool 0.2%
- CVE-2024-41921 Unsafe use of eval() method in rostopic echo tool 0.2%
- CVE-2024-41148 Unsafe use of eval() method in rostopic hz tool 0.2%
- CVE-2024-39835 Unsafe use of eval() method in roslaunch tool 0.2%
- CVE-2024-39289 Unsafe use of eval() method in rosparam tool 0.2%
- CVE-2024-39780 Use of unsafe yaml load in dynparam 0.4%