Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-105299
  • github.com/cloudflare/pingora
 Pingora forwards client-nominated Connection headers to HTTP/1 upstreams,... 10 hours ago
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-105298
  • github.com/cloudflare/pingora
 Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and... 10 hours ago
  • Fix available
  • Severity - 6.3 (Medium)
CVE-2026-77938
  • github.com/letta-ai/letta
 Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment... 11 hours ago
  • No fix available
  • Severity - 7.1 (High)
CVE-2026-77937
  • github.com/letta-ai/letta
 Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header 11 hours ago
  • No fix available
  • Severity - 8.6 (High)
CVE-2026-77936
  • github.com/letta-ai/letta
 Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and... 11 hours ago
  • No fix available
  • Severity - 9.3 (Critical)
CVE-2026-77935
  • github.com/coze-dev/coze-studio
 Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers 11 hours ago
  • No fix available
  • Severity - 8.7 (High)
CVE-2026-77934
  • github.com/coze-dev/coze-studio
 Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner 11 hours ago
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-77933
  • github.com/eosphoros-ai/db-gpt
 DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose... 11 hours ago
  • No fix available
  • Severity - 9.3 (Critical)
CVE-2026-77932
  • github.com/eosphoros-ai/db-gpt
 DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent 11 hours ago
  • No fix available
  • Severity - 9.3 (Critical)
CVE-2026-77930
  • github.com/evoscientist/evoscientist
 EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents 11 hours ago
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-77926
  • github.com/apconw/aix-db
 Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool 11 hours ago
  • No fix available
  • Severity - 8.7 (High)
CVE-2026-109444
  • github.com/tracer-cloud/opensre
 OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt... 11 hours ago
  • No fix available
  • Severity - 8.7 (High)
CVE-2026-109443
  • github.com/jd-opensource/joysafeter
 JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell 11 hours ago
  • No fix available
  • Severity - 8.7 (High)
CVE-2026-109442
  • github.com/cas-bigdatalab/piflow
 piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell 11 hours ago
  • No fix available
  • Severity - 9.3 (Critical)
CVE-2026-109441
  • github.com/ginlix-ai/langalpha
 LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker... 11 hours ago
  • No fix available
  • Severity - 6.9 (Medium)
CVE-2026-109440
  • github.com/ginlix-ai/langalpha
 LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and... 11 hours ago
  • No fix available
  • Severity - 8.6 (High)
Load more...