k
kroki
Security Risk Profile
36
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 6, 2026 to present
5
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
6.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
36/100
low
🆕 1Fresh (<7d)📈 5 in Last 30 Days
Severity Distribution
Critical
0High
2Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
SSRF
2
2
Path Traversal
2
3
XSS
1
Most Affected Products
1. Kroki Kroki3
2. Kroki Mermaid companion2
Recent Vulnerabilities
See more →CVE-2026-129447
CVSS 5.3medium
Kroki before 0.36.0 Reflected XSS via DBML Table URLs
Nov 14, 2026🔧 No Patch
CVE-2026-102356
CVSS 5.0medium
Kroki Mermaid companion SSRF via flowchart image URLs
Nov 6, 2026🔧 No Patch
GHSA-px99-rjv4-49g8
CVSS 5.0medium
Kroki Mermaid companion SSRF via flowchart image URLs
Nov 6, 2026🔧 No Patch
CVE-2026-102359
CVSS 7.5high
Kroki: TikZ Secure Mode Local File Read via LaTeX File I/O Primitives
Nov 6, 2026🔧 No Patch
GHSA-r54f-fq6c-53vw
CVSS 7.5high
Kroki: TikZ Secure Mode Local File Read via LaTeX File I/O Primitives
Nov 6, 2026🔧 No Patch
Monitor kroki in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.