d
dotnetfoundation
Security Risk Profile
40
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 25, 2021 to present
9
Total CVEs
2
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
40/100
medium
Severity Distribution
Critical
0High
2Medium
7Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
7
2
CSRF
1
Most Affected Products
1. Dotnetfoundation Piranha Cms19
2. nuget/Piranha6
3. Piranha Piranha CMS1
4. Piranha CMS Piranha CMS1
5. Piranha CMS1
Recent Vulnerabilities
See more →CVE-2025-67290
CVSS 6.1medium
Dec 22, 2025🔧 No Patch
CVE-2025-67291
CVSS 6.1medium
Dec 22, 2025🔧 No Patch
CVE-2025-61413
CVSS 6.1medium
Oct 23, 2025🔧 No Patch
CVE-2025-57692
CVSS 6.8medium
Sep 26, 2025🔧 No Patch
CVE-2024-55342
CVSS 4.7medium
Dec 20, 2024🔧 No Patch
CVE-2024-55341
CVSS 4.7medium
Dec 20, 2024🔧 No Patch
CVE-2022-4952
CVSS 7.5high
OmniSharp csharp-language-server-protocol JSON Serializer SerializerBase.cs CreateSerializerSettings resource consumption
Jul 17, 2023
CVE-2021-25976
CVSS 8.1high
Piranha CMS - Site-wide Cross-Site Request Forgery (CSRF)
Nov 16, 2021
CVE-2021-25977
CVSS 5.4medium
Piranha CMS - Stored XSS in Page Title
Oct 25, 2021
Monitor dotnetfoundation in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.