aEnrich
Security Scorecard
Score
36D
Total CVEs
2,501
Patch Rate
38%
959 patched
Avg Response
149d
days to patch
Critical Gaps
43
exploitable, no detection
Severity Breakdown
Critical215
High631
Medium1015
Low29
Patch Status
Patched959 (38%)
Partial/Workaround298 (12%)
Unpatched1244 (50%)
CVEs (2,726)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2026-0605 | Code-projects Online Music Site SQL Injection | High | 7.3 | - | Workaround |
| CVE-2025-67315 | aEnrich Auth Bypass | Medium | 5.4 | - | Workaround |
| CVE-2025-65110 | Vega Vulnerability | High | 8.1 | - | Workaround |
| CVE-2025-65922 | aEnrich Token Forgery | Medium | 4.3 | 0d | Unpatched |
| CVE-2025-67427 | Evershop SSRF Vulnerability | Medium | 6.5 | - | Patched |
| CVE-2026-0606 | SQL Injection in Online Music Site 1.0 | High | 7.3 | - | Unpatched |
| CVE-2025-67732 | Dify API Key Exposure | Medium | 6.5 | - | Patched |
| CVE-2025-64424 | Coolify Command Injection Vulnerability | High | 8.8 | - | Patched |
| CVE-2025-64425 | Coolify Server Management Tool Vulnerability | High | 8.1 | - | Patched |
| CVE-2025-67303 | ComfyUI-Manager Remote Configuration Manipulation | High | 7.5 | - | Patched |