H
Vendor security profile
Hmbown
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical1
CISA KEV0
Public exploit7
Patch rate%100
Avg. CVSS8.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
9
0
0
CVE KEV
CVE severity distribution
9toplam CVE
Critical1 (11%)
High8 (89%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%78
Public exploit
9Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
8.7
CVE-2026-75915
CodeWhale before 0.8.64 Environment Variable Leak via js_execution
H
Patch verifiedEPSS %1
8.7
CVE-2026-75914
CodeWhale before 0.8.64 Path Traversal via image_analyze symlink
H
Patch verifiedEPSS %1
8.5
CVE-2026-75913
CodeWhale before 0.8.64 Argument Injection via git_show
H
Patch verifiedEPSS %0
8.3
CVE-2026-75912
CodeWhale before 0.8.64 Argument Injection via git_blame
H
Patch verifiedEPSS %0
8.5
CVE-2026-75911
CodeWhale before 0.8.64 Remote Code Execution via allow_shell
H
Patch verifiedEPSS %0
8.7
CVE-2026-75859
CodeWhale before 0.8.64 Arbitrary File Read via instructions
H
Patch verifiedEPSS %1
8.5
CVE-2026-75858
CodeWhale rlm_eval before 0.8.64 Remote Code Execution
H
Patch verifiedEPSS %0
7.3
CVE-2026-75857
CodeWhale before 0.8.64 Privilege Escalation via exec_shell_interact
H
Patch verifiedEPSS %0
9.2
CVE-2026-75856
CodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOU
H
Patch verifiedEPSS %0