kas vulnerabilities
CVEs whose affected-version data names the kas package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-54548Low· 3.3kas Persistently Disables SSH Host Key Checking
kas Persistently Disables SSH Host Key Checking
▾ Sunlitkas · kasEPSS 0.09%via OSV
CVE-2026-47191Lowkas is a setup tool for bitbake based projects
kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID (SHA-1 or SHA-256) to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a…
▾ Sunlitkas · kasEPSS 0.16%via NVD
CVE-2026-47192Lowkas is a setup tool for bitbake based projects
kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may a…
▾ Sunlitkas · kasEPSS 0.17%via NVD