Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-58484 |
|
Path Traversal in network-ai (CVE-2026-58484)
path traversal in network-ai (CVE-2026-58484). Data can be tampered with by attackers. Exploitable via ``path``. Mitigation: upgrade to `5.12.2` or later.
|
| CVE-2026-58413 |
|
Path Traversal in network-ai (CVE-2026-58413)
path traversal in network-ai (CVE-2026-58413). Confidential information can be exposed externally. Exploitable via ``backupId``. Mitigation: upgrade to `5.12.2` or later.
|
| CVE-2026-58414 |
|
Path Traversal in network-ai (CVE-2026-58414)
path traversal in network-ai (CVE-2026-58414). Confidential information can be exposed externally. Exploitable via ``lstatSync``. Mitigation: upgrade to `5.12.2` or later.
|
| CVE-2026-58481 |
|
Path Traversal in network-ai (CVE-2026-58481)
path traversal in network-ai (CVE-2026-58481). Confidential information can be exposed externally. Exploitable via ``AgentRuntime``. Mitigation: upgrade to `5.12.2` or later.
|
| CVE-2026-58482 |
|
Cross-Site Request Forgery (CSRF) in ssrf (CVE-2026-58482)
vulnerability in ssrf (CVE-2026-58482). Data can be tampered with by attackers. Exploitable via `POST /approvals/`. Mitigation: upgrade to `5.12.2` or later.
|
| CVE-2026-46701 |
|
Vulnerability in network-ai (CVE-2026-46701)
vulnerability in network-ai (CVE-2026-46701). Data can be tampered with by attackers. Exploitable via `POST /mcp`. Mitigation: upgrade to `5.4.5` or later.
|