Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

32 records

TI-2025-03306 CVE-2025-3753 · GHSA-rrcg-cxhw-9798

Unsafe use of eval() method in rosbag tool

Priority LOW 35

A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00228 Published 2025-07-17 No fix listed CWE-94
Priority LOW 35

A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00222 Published 2025-07-17 No fix listed CWE-94
Priority LOW 35

A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00222 Published 2025-07-17 No fix listed CWE-94
Priority LOW 35

A code injection vulnerability has been identified in the Robot Operating System (ROS) 'roslaunch' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00203 Published 2025-07-17 No fix listed CWE-94
TI-2024-26248 CVE-2024-39289 · GHSA-j77r-p467-v78c

Unsafe use of eval() method in rosparam tool

Priority LOW 35

A code execution vulnerability has been discovered in the Robot Operating System (ROS) 'rosparam' tool, affecting ROS distributions Noetic Ninjemys and earlier.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00208 Published 2025-07-17 No fix listed CWE-94
TI-2024-26698 CVE-2024-39780 · GHSA-92fv-mr4v-6fw4

Use of unsafe yaml load in dynparam

Priority MEDIUM 43

A YAML deserialization vulnerability was found in the Robot Operating System (ROS) 'dynparam', a command-line tool for getting, setting, and deleting parameters of a dynamically configurable node, affecting ROS distribut…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00404 Published 2025-04-02 No fix listed CWE-20
Load more