Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Open Design Alliance records in CISA KEVNo Open Design Alliance vulnerabilities are listed in CISA KEV.
Priority LOW 38
Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00674 · Published 2024-12-12 · Fixed in 2025.3 CWE-200
Priority LOW 35
Out-of-bounds Write vulnerability was discovered in Open Design Alliance Drawings SDK before 2025.10.
CVSS 4.0HIGH 8.1· Local · No auth · User interaction · EPSS 0.00193 · Published 2024-12-04 · Fixed in 2025.10 CWE-787
Priority LOW 30
A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK static versions (mt) before 2026.12.
CVSS 4.0HIGH 7.0· Local · No auth · No interaction · EPSS 0.00153 · Published 2025-12-22 · Fixed in 2026.12 CWE-457
