compliance-trestle vulnerabilities (PyPI)
9 vulnerabilities.
-
compliance-trestlePyPI Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345) 7.7 High -
compliance-trestlePyPI Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439) 7.8 High -
compliance-trestlePyPI Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data 7.8 High -
compliance-trestlePyPI Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0 8.6 High -
compliance-trestlePyPI compliance-trestle Vulnerable to Remote Code Execution via Recursive Server-Side Template Injection (SSTI) 7.8 High -
compliance-trestlePyPI compliance-trestle Vulnerable to SSRF in Remote Fetching Subsystem 6.7 Medium -
compliance-trestlePyPI compliance-trestle - jinja has an Arbitrary File Write via Path Traversal 8.4 High -
compliance-trestlePyPI compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal 6.9 Medium -
compliance-trestlePyPI compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal 7.1 High