Oscal-Compass

9 CVEs across 1 Oscal-Compass products. Browse Oscal-Compass vulnerabilities, severities, and proof-of-concept exploits.

Oscal-Compass products with known CVEs

ProductCVEs
Compliance-Trestle9
Oscal-Compass CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57171High7.72026-08-26Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 throug…
CVE-2026-57170High7.82026-08-26Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions prior to 3.12.4 and 4.0.0 through 4.0.3…
CVE-2026-527762026-08-26Compliance-trestle (Trestle) is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurity…
CVE-2026-54757High7.82026-08-25Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 throug…
CVE-2026-46345High8.42026-08-17compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the `-o/--output` argument in `trestle author jin…
CVE-2026-46439High7.82026-08-14compliance-trestle is a tooling platform for managing compliance as code. Versions prior to 3.12.2 and 4.0.3 have a Server-Side Template Injection (SSTI) vulne…
CVE-2026-46380Medium6.72026-08-14compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the HTTPSFetcher._do_fetch() method passes a user…
CVE-2026-457742026-08-13compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the compliance-trestle library's profile import m…
CVE-2026-457252026-08-13compliance-trestle is a tooling platform for managing compliance as code. Prior to versiions 3.12.2 and 4.0.3, the compliance-trestle library's remote fetching…