Security
فارسی
All products

compliance-trestle

PyPI · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)CVE-2026-57171 · GHSA-R4VP-3VW6-R2X5Version ranges need review. compliance-trestle PyPI High Fix reported
Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)CVE-2026-57170 · GHSA-MR95-65J8-9MXPVersion ranges need review. compliance-trestle PyPI High Fix reported
Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted DataCVE-2026-54757 · GHSA-JW39-3688-R4RXVersion ranges need review. compliance-trestle PyPI High Fix reported
compliance-trestle - jinja has an Arbitrary File Write via Path TraversalCVE-2026-46345 · GHSA-4Q5V-7G7X-J79WVersion ranges need review. compliance-trestle PyPI High Fix reported
compliance-trestle has an URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0CVE-2026-52776 · GHSA-H47F-GMJP-M7RRVersion ranges need review. compliance-trestle PyPI High Fix reported
compliance-trestle Vulnerable to SSRF in Remote Fetching SubsystemCVE-2026-46380 · GHSA-W76H-Q7C6-JPJPVersion ranges need review. compliance-trestleFile Integrity Operator/compliance/openshift-compliance-content-rhel8 PyPIRed Hat Medium Fix reported
compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path TraversalCVE-2026-45725 · GHSA-G3VG-VX23-3858Version ranges need review. compliance-trestle PyPI High Fix reported
compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path TraversalCVE-2026-45774 · GHSA-MJ4X-VF5C-5XG8Version ranges need review. compliance-trestle PyPI Medium Fix reported
compliance-trestle Vulnerable to Remote Code Execution via Recursive Server-Side Template Injection (SSTI)CVE-2026-46439 · GHSA-GG2G-P7XC-QQMMVersion ranges need review. compliance-trestle PyPI High Fix reported