Oscal-compass vulnerabilities
We track 7 vulnerabilities in Oscal-compass products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.
Latest Oscal-compass vulnerabilities
- 7.7 High severity
compliance-trestle: Improper Limitation of a Pathname to a Restricted Directory
Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the catalog-generate, profile-generate, and ssp-generate author commands write generated Mar
- 7.8 High severity
compliance-trestle: Improper Control of Generation of Code
Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions prior to 3.12.4 and 4.0.0 through 4.0.3, the custom Jinja2 include tags mdsection_include and md_clean_include re-parse the content of an in
- 8.6 High severity
compliance-trestle: Incomplete List of Disallowed Inputs
Compliance-trestle (Trestle) is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurityValidator that guards trestle's remote-fetch paths against server-side request forgery can be bypasse
- 7.8 High severity
compliance-trestle: Improper Control of Generation of Code
Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle is vulnerable to server-side template injection that can lead to remote code executi
- 8.4 High severity
compliance-trestle: Improper Limitation of a Pathname to a Restricted Directory
compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the `-o/--output` argument in `trestle author jinja` allows writing files outside the intended workspace. The application does not properly validate,
- 7.8 High severity
compliance-trestle: Improper Control of Generation of Code
compliance-trestle is a tooling platform for managing compliance as code. Versions prior to 3.12.2 and 4.0.3 have a Server-Side Template Injection (SSTI) vulnerability exists in the `trestle author jinja` command. The command recursively evaluates rendered tem
- 7.1 High severity
compliance-trestle: External Control of File Name or Path
compliance-trestle is a tooling platform for managing compliance as code. Prior to versiions 3.12.2 and 4.0.3, the compliance-trestle library's remote fetching cache mechanism (HTTPSFetcher and SFTPFetcher) constructs the local cache file path from the URL pat