kovidgoyal kitty
productUScpe:2.3:a:kovidgoyal:kitty:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
EPSS ≥ 10%
0
unpatched
by severity
2critical5high0medium0low
updated 2026-10-27
01
vulnerabilities (9)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2025-43929US | high7.8 | Exploit |
| CVE-2020-35605US | critical9.8 | — |
| CVE-2026-33633US | high8.8 | — |
| CVE-2026-42850US | high8.8 | — |
| CVE-2026-33642US | critical9.8 | — |
| CVE-2026-54056US | high7.1 | — |
| CVE-2026-54057US | high7.8 | — |
| CVE-2026-42851US | —OT elevated | — |
| CVE-2026-54055US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-59Improper Link Resolution Before File Access ('Link Following')2 CVEs
- CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
- CWE-122Heap-based Buffer Overflow1 CVEs
- CWE-125Out-of-bounds Read1 CVEs
- CWE-150Improper Neutralization of Escape, Meta, or Control Sequences1 CVEs
- CWE-190Integer Overflow or Wraparound1 CVEs
- CWE-346Origin Validation Error1 CVEs
- CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE9 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan