Oscal-compass Compliance-trestle vulnerabilities
- oscal-compass compliance-trestleTrestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)7.7 High
- oscal-compass compliance-trestleTrestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)7.8 High
- oscal-compass compliance-trestleTrestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data7.8 High
- oscal-compass compliance-trestleTrestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.08.6 High
- oscal-compass compliance-trestlecompliance-trestle Vulnerable to Remote Code Execution via Recursive Server-Side Template Injection (SSTI)7.8 High
- oscal-compass compliance-trestlecompliance-trestle Vulnerable to SSRF in Remote Fetching Subsystem6.7 Medium
- oscal-compass compliance-trestlecompliance-trestle - jinja has an Arbitrary File Write via Path Traversal8.4 High
- oscal-compass compliance-trestlecompliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal6.9 Medium
- oscal-compass compliance-trestlecompliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal7.1 High