Oxidized Web Project Oxidized Web — known CVE vulnerabilities

Every CVE whose affected-product data names Oxidized Web Project Oxidized Web, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-27590 — CVSS 9.0 (critical): In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux…
• CVE-2019-25088 — CVSS 3.5 (low): A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file…