Open-source-robotics-foundation
5 CVEs tracked since 2025. Since Jul 2025, none of them reached CISA KEV.
Open-source-robotics-foundation CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2025-07 | 5 | 0 |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in Open-source-robotics-foundation's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 7 most recently published vulnerabilities affecting Open-source-robotics-foundation.
- CVE-2024-42002Unsafe use of eval() method in ros2 topic hz tool8.4
- CVE-2025-3753Unsafe use of eval() method in rosbag tool7.8
- CVE-2024-41921Unsafe use of eval() method in rostopic echo tool7.8
- CVE-2024-41148Unsafe use of eval() method in rostopic hz tool7.8
- CVE-2024-39835Unsafe use of eval() method in roslaunch tool7.8
- CVE-2024-39289Unsafe use of eval() method in rosparam tool7.8
- CVE-2024-39780Use of unsafe yaml load in dynparam7.8
The record
- Peak rank
- #194 in Jul 2025
- Busiest month shown
- Jul 2025, 5 CVEs
- Months with a KEV entry
- 0 since Jul 2025
- Monthly snapshots
- 1 since 2025