E
Vendor security profile
EOS
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
11toplam CVE
Uncertain11 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
11Unknown
Latest vulnerabilities
7.5
CVE-2026-81515Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)
Patch status unknownEPSS %1
7.5
CVE-2026-81516Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)
Patch status unknownEPSS %1
6.5
CVE-2026-81868Steeltoe: Header-forwarded client cert lacks proof of private-key possession
Patch status unknownEPSS %0
5.9
CVE-2026-75523Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secrets
Patch status unknownEPSS %0
9.3
9.3
CVE-2026-73034DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header
Patch verified Public Exploits:1EPSS %6
5.3
CVE-2026-39922GeoNode SSRF via Service Registration
Patch status unknownEPSS %0
6.3
CVE-2026-39921Server-side request forgery in Geosolutionsgroup Geonode
Patch status unknownEPSS %0