Oscal-Compass Compliance-Trestle
9 CVEs affecting Oscal-Compass Compliance-Trestle. Latest disclosed: 2026-08-26. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-46345 | High | 8.4 | 2026-08-17 | compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the `-o/--output` argument in `trestle author jin… |
CVE-2026-57170 | High | 7.8 | 2026-08-26 | Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions prior to 3.12.4 and 4.0.0 through 4.0.3… |
CVE-2026-54757 | High | 7.8 | 2026-08-25 | Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 throug… |
CVE-2026-46439 | High | 7.8 | 2026-08-14 | compliance-trestle is a tooling platform for managing compliance as code. Versions prior to 3.12.2 and 4.0.3 have a Server-Side Template Injection (SSTI) vulne… |
CVE-2026-57171 | High | 7.7 | 2026-08-26 | Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 throug… |
CVE-2026-46380 | Medium | 6.7 | 2026-08-14 | compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the HTTPSFetcher._do_fetch() method passes a user… |
CVE-2026-52776 | | 2026-08-26 | Compliance-trestle (Trestle) is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurity… | |
CVE-2026-45774 | | 2026-08-13 | compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the compliance-trestle library's profile import m… | |
CVE-2026-45725 | | 2026-08-13 | compliance-trestle is a tooling platform for managing compliance as code. Prior to versiions 3.12.2 and 4.0.3, the compliance-trestle library's remote fetching… |