Comparison Overview
Burlington Stores, Inc.

Burlington Stores, Inc.
2006 Route 130, Burlington, NJ, US, 08016
Last Update: 18/09/2026
Burlington Stores, Inc., headquartered in New Jersey, is a nationally recognized off-price retailer. Burlington is a Fortune 500 company and its common stock is traded on the New York Stock Exchange under the ticker symbol “BURL.” The Company operates more than 1000 sto...

Ross Stores, Inc.
5130 Hacienda Drive, Dublin, CA, US, 94568
Last Update: 12/09/2026
For the last 40+ years, Ross Stores, Inc. has grown from a six-store chain into an $21.1 billion, Fortune 500 Company. We operate our off-price businesses in a way that keeps costs low so we can pass the savings to our customers. We continue to open new stores and our s...
Compliance Ranges Comparison

Burlington Stores, Inc.







Ross Stores, Inc.






Benchmark & Cyber Underwriting Signals
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for Burlington Stores, Inc. in 2026.
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for Ross Stores, Inc. in 2026.
Incident History - Burlington Stores, Inc. (X = Date, Y = Severity)
Burlington Stores, Inc. cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Ross Stores, Inc. (X = Date, Y = Severity)
Ross Stores, Inc. cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Burlington Stores, Inc.

Ross Stores, Inc.
FAQ
Latest Global CVEs
Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user running Vibe.
- https://github.com/mistralai/mistral-vibe
- https://github.com/mistralai/mistral-vibe/blob/19b5b74faa78d0816b8d4d4c7d7543fc3520678c/vibe/core/git/repo.py#L411-L431
- https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553
- https://github.com/mistralai/mistral-vibe/issues/996
- https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5
- https://www.vulncheck.com/advisories/mistral-vibe-before-2.25.5-remote-code-execution-via-git-post-checkout