M
Vendor security profile
marcosschroh
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical0
CISA KEV0
Public exploit5
Patch rate%0
Avg. CVSS8.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
11
CVE KEV
CVE severity distribution
11toplam CVE
High11 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%45
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
11Unknown
Latest vulnerabilities
8.8
CVE-2026-108385
dataclasses-avroschema enum symbols can inject statements through generated member names
M
Patch status unknown
8.8
CVE-2026-108384
dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string
M
Patch status unknown
8.8
CVE-2026-108383
dataclasses-avroschema enum field defaults can inject statements into generated modules
M
Patch status unknown
8.8
CVE-2026-108382
dataclasses-avroschema allows code injection through generated enum-symbol string literals
M
Patch status unknown
8.8
CVE-2026-108381
dataclasses-avroschema pydantic-class metadata allows code injection in generated annotations
M
Patch status unknown
8.8
CVE-2026-108380
dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions
M
Patch status unknown
8.8
CVE-2026-108379
dataclasses-avroschema fixed namespaces allow code injection in generated annotations
M
Patch status unknown
8.8
CVE-2026-108378
dataclasses-avroschema record documentation can terminate generated class docstrings
M
Patch status unknown
8.8
CVE-2026-108377
dataclasses-avroschema allows code injection through generated Meta.schema_name
M
Patch status unknown
8.8
CVE-2026-108376
dataclasses-avroschema allows code injection through record names in generated default factories
M
Patch status unknown