L
Vendor security profile
linuxfoundation
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs63
Critical10
CISA KEV0
Public exploit16
Patch rate%62
Avg. CVSS7.4
12-month vulnerability rate
3
2
2
1
12
4
1
2
26
1
0
5
CVE KEV
CVE severity distribution
63toplam CVE
Critical10 (16%)
High35 (56%)
Medium16 (25%)
Low2 (3%)
Patch and exploitation view
%62
Verified patch
%0
CISA KEV
%25
Public exploit
39Patch available
0Partial
0Workaround
0Vendor: no patch
24Unknown
Latest vulnerabilities
7.7
CVE-2026-106509
Backstage: Improper validation of MkDocs theme configuration in TechDocs
B
Patch verifiedEPSS %0
5.3
CVE-2026-106508
Backstage: Potential file exposure through local TechDocs publisher
B
Patch verifiedEPSS %0
5.3
CVE-2026-106507
Backstage: TechDocs arbitrary file read via mkdocs snippets
B
Patch verifiedEPSS %0
5.3
CVE-2026-106506
Backstage: Improper input validation in scaffolder task list ordering
B
Patch verifiedEPSS %0
7.7
CVE-2026-106505
Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend
B
Patch verifiedEPSS %0
7.1
CVE-2026-49114
ONNX symlink-following and path-traversal arbitrary file write
O
Patch status unknownEPSS %0
7.1
CVE-2026-65918
PyTorch torchvision GIF Decoder Out-of-bounds Heap Read
P
Patch verifiedEPSS %0
7.5
CVE-2026-50151
Server-side request forgery in Linuxfoundation Oras
L
Patch verifiedEPSS %0
7.5
CVE-2026-49835
Resource allocation without limits in Linuxfoundation Sigstore Timestamp Authority
L
Patch verifiedEPSS %1
7.3
CVE-2026-62290
Incorrect authorization in Linuxfoundation Cert Manager
L
Patch verifiedEPSS %0