The Csaf Validator Lib Project provides a focused validation library for CSAF (Cybersecurity Asset Format) documents, a niche but essential component of the software supply chain for security advisory processing and distribution. Its vulnerability footprint remains confined to the validator library itself, reflecting the specialized nature and limited deployment breadth of the product. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Csaf Validator Lib Project over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-47925HIGH The validate JSON endpoint of the Secvisogram csaf-validator-service in versions < 0.1.0 processes tests with unexpected names. This insufficient input validation of requests by an | Mar 27, 2023 | 7.5 | 23 | NO | NO |
CVE-2022-47924MEDIUM An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions < 0.1.0 wich can result in arbi | Mar 27, 2023 | 6.5 | 21 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Csaf Validator Lib Project.
Media articles that mention a CVE ID that affects a product developed by Csaf Validator Lib Project — matched by CVE ID, not by vendor name.