Skip to main content

Vendors Questionnaires Investors News

0-Doubt — neutral IT/Security research

Browse Products Market reports Resellers Certified analysts Investors RFI/RFP questionnaires How trust works Nothing here is ranked by payment Help & FAQ API Privacy Terms Cookies

Semgrep Supply Chain | 0-Doubt

Home
Vendors
Semgrep
Semgrep Supply Chain

Home
Vendors
Application Security (ASPM)
Semgrep Supply Chain

Semgrep Supply Chain

SCAAI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 20/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 2 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~115 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

Software composition analysis.

by Semgrep · semgrep.dev

Known CVEs (2)

CVE-2026-64113 ↗CRITICAL 9.82026
In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevf_clean_rx_irq() prunes frames whose source MAC matches the VF'…
CVE-2023-32758 ↗HIGH 7.52023
giturlparse (aka git-url-parse) through 1.2.2, as used in Semgrep 1.5.2 through 1.24.1, is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing untrusted URLs. This might be relevant …

News about Semgrep Supply Chain (2)

All Semgrep news →

New capabilityIntroducing Malware Detection and Response Automation
Vendor blogSep 24, 2026names “Semgrep Supply Chain”
AnnouncementDynamically Resolve Dependencies for a Full Picture of Your Inventory
Vendor blogMay 7, 2026names “Semgrep Supply Chain”

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Application Security (ASPM) products

Semgrep Assistant · Semgrep
Semgrep Code · Semgrep
Semgrep Guardian · Semgrep
Semgrep Secrets · Semgrep
Signal Sciences · Signal Sciences
Silverskin · Silverskin
Simovits Consulting · Simovits Consulting
Slim.AI · Slim.AI