software_acquisition_guide vulnerabilities

CVEs whose affected-version data names the software_acquisition_guide package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-67634Medium· 4.4

9mo ago

The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields

The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load Ja…

▾ Sunlitcisa · software_acquisition_guideEPSS 0.19%via NVD