01 Record

CVE-2026-46380

compliance-trestle Vulnerable to SSRF in Remote Fetching Subsystem

MediumPUBLISHEDCNA: GitHub_M

Base score6.7 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

02 Description

compliance-trestle Vulnerable to SSRF in Remote Fetching Subsystem

Published: 2026-08-14 16:10Z2 HR AGO
Last updated: 2026-08-14 16:10Z2 HR AGO
Reserved: 2026-05-13
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: Medium (CVSS 6.7)
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
Weaknesses: CWE-918
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 207f9429e0e4c65f45dfbb3d9fc8ff871af12aa3ba46230a90e700ae74ec5d25

VendorProductVersionsPlatforms

oscal-compasscompliance-trestle>= 4.0.0, < 4.0.3, < 3.12.2—