Chocolatey vulnerabilities

6 CVEs affecting Chocolatey products, 0 known to be exploited (CISA KEV), with EPSS scores. Most affected: Boxstarter, Chocolatey Azure-Pipelines-Agent, Chocolatey Cmder, Chocolatey PHP, Chocolatey PYTHON3.

• Boxstarter: 1 CVE
• Chocolatey Azure-Pipelines-Agent: 1 CVE
• Chocolatey Cmder: 1 CVE
• Chocolatey PHP: 1 CVE
• Chocolatey PYTHON3: 1 CVE
• Chocolatey Ruby: 1 CVE