O
Vendor security profile
ondata
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit2
Patch rate%20
Avg. CVSS5.4
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
4
1
0
CVE KEV
CVE severity distribution
5toplam CVE
Medium4 (80%)
Low1 (20%)
Patch and exploitation view
%20
Verified patch
%0
CISA KEV
%40
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
5.7
CVE-2026-61612
@aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509
O
Patch status unknownEPSS %0
5.7
CVE-2026-53509
@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)
O
Patch verifiedEPSS %0
6.5
CVE-2026-73846
CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning
O
Patch status unknownEPSS %0
5.3
CVE-2026-73845
CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)
O
Patch status unknownEPSS %0
3.7
CVE-2026-73844
CKAN MCP Server: Information disclosure via verbose error reflection
O
Patch status unknownEPSS %0
9.8
CVE-2024-12084
Out-of-bounds write in Samba Rsync
S
Patch verifiedEPSS %72
6.1
CVE-2024-12086
Rsync: rsync server leaks arbitrary client files
R
Patch status unknownEPSS %2
7.5
CVE-2024-12085
Rsync: info leak via uninitialized stack contents
R
Patch verifiedEPSS %9
7.5
CVE-2024-12088
Path traversal in Samba Rsync
S
Patch status unknownEPSS %5
7.5
CVE-2024-12087
Path traversal in Samba Rsync
S
Patch status unknownEPSS %2