p
pinecone
Security Risk Profile
27
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 2 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 12, 2024 to present
2
Total CVEs
0
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
27/100
low
Severity Distribution
Critical
0High
0Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
XSS
1
Most Affected Products
1. Pinecone Pinecone Simulator1
2. go/github.com/matrix-org/pinecone1
3. Google API and Google Cloud keys1
4. OpenWeatherMap bot tokens1
5. Telegram bot tokens1
Recent Vulnerabilities
See more →CVE-2025-27155
CVSS 6.1EPSS 0%medium
In-memory stored Cross-site scripting (XSS) vulnerability in pineconesim
Mar 4, 2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/over-12-million-auth-secrets-and-keys-leaked-on-github-in-2023/
unknown
Over 12 million auth secrets and keys leaked on GitHub in 2023
Mar 12, 2024🔧 No Patch
Monitor pinecone in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.