Log in Start free

oscal-compass

Products

ProductCVEsExploitedLatest
compliance-trestle9–Aug 25, 2026

Exploited and recent CVEs

  • CVE-2026-57171 High 7.7 Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345) 0.2%
  • CVE-2026-57170 High 7.8 Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439) 0.2%
  • CVE-2026-52776 High 8.6 Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0 0.4%
  • CVE-2026-54757 High 7.8 Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data 0.4%
  • CVE-2026-46345 High 8.4 compliance-trestle - jinja has an Arbitrary File Write via Path Traversal 0.2%
  • CVE-2026-46380 Medium 6.7 compliance-trestle Vulnerable to SSRF in Remote Fetching Subsystem 0.1%
  • CVE-2026-46439 High 7.8 compliance-trestle Vulnerable to Remote Code Execution via Recursive Server-Side Template Injection (SSTI) 0.3%
  • CVE-2026-45774 Medium 6.9 compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal 0.5%
  • CVE-2026-45725 High 7.1 compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal 0.5%