M
Vendor security profile
mend
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs12
Critical4
CISA KEV0
Public exploit1
Patch rate%0
Avg. CVSS8.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
10
0
CVE KEV
CVE severity distribution
12toplam CVE
Critical4 (33%)
High6 (50%)
Medium2 (17%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%8
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
12Unknown
Latest vulnerabilities
5.1
CVE-2026-95928
recommenders-team recommenders Dict Loading mind_iterator.py pickle.load deserialization
R
Patch status unknownEPSS %0
8.5
CVE-2026-88889
Renovate before 44.14.7 Command Injection via distributionType
R
Patch status unknownEPSS %1
7.3
CVE-2026-88888
Renovate before 44.14.7 Command Injection via Mix organization
R
Patch status unknownEPSS %1
9.2
CVE-2026-88887
Renovate before 44.11.2 Credential Exfiltration via Link Header
R
Patch status unknownEPSS %0
8.5
CVE-2026-88886
Renovate before 44.14.7 Command Injection via gradle-wrapper
R
Patch status unknownEPSS %0
7.3
CVE-2026-88885
Renovate before 44.14.7 Command Injection via depName
R
Patch status unknownEPSS %1
6.9
CVE-2026-88884
Renovate before 44.3.1 Authentication Bypass via Digest Updates
R
Patch status unknownEPSS %0
8.3
CVE-2026-88883
Renovate before 44.14.4 TLS Private Key Log Sanitisation
R
Patch status unknownEPSS %0
9.2
CVE-2026-88882
Renovate before 44.11.2 Credential Exfiltration via Link Header
R
Patch status unknownEPSS %0
9.2
CVE-2026-88881
Renovate before 44.11.3 Credential Exfiltration via Link Header
R
Patch status unknownEPSS %0