A
Vendor security profile
aaif-goose
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs3
Critical0
CISA KEV0
Public exploit1
Patch rate%33
Avg. CVSS6.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
1
1
CVE KEV
CVE severity distribution
3toplam CVE
High2 (67%)
Low1 (33%)
Patch and exploitation view
%33
Verified patch
%0
CISA KEV
%33
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
2.3
CVE-2026-109561
goose from 1.28.0 before 1.44.0 Manual Approval Bypass via Read-Only Tool Annotations
A
Patch verified
8.7
CVE-2026-85623
goose 1.37.0 Arbitrary Command Execution via Recipe Extensions
A
Patch status unknownEPSS %1
7.0
CVE-2026-72718
goose: Arbitrary command execution in goose CLI via `goose review` via git core.fsmonitor
A
Patch status unknownEPSS %0