Part-db Project Part-db — known CVE vulnerabilities

Every CVE whose affected-product data names Part-db Project Part-db, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-0848 — CVSS 9.8 (critical): OS Command Injection in GitHub repository part-db/part-db prior to 0.5.11.
• CVE-2023-26042 — CVSS 6.1 (medium): Part-DB is an open source inventory management system for your electronic components. User input was found not being properly escaped…
• CVE-2025-55194 — CVSS 5.7 (medium): Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload…