Vulnerabilities in knowns-dev
14 resultsCVE-2026-86439HIGHknowns before 0.30.0 Path Traversal via MCP doc and memory toolsEPSS 1.1%CVE-2026-86538HIGHknowns before 0.30.0 Path Traversal via templateFile parameterEPSS 1.0%CVE-2026-86543CRITICALknowns before 0.30.0 Unauthenticated Management API ExposureEPSS 0.9%CVE-2026-88899CRITICALknowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory HeaderEPSS 0.8%CVE-2026-86541HIGHknowns before 0.30.0 Path Traversal via code.replace MCP actionEPSS 0.8%CVE-2026-86775HIGHknowns before 0.30.0 Path Traversal via Document APIEPSS 0.7%CVE-2026-86542HIGHknowns before 0.30.0 Path Traversal via Import NameEPSS 0.7%CVE-2026-88937HIGHknowns through 0.33.0 Path Traversal via Template EngineEPSS 0.7%CVE-2026-86544HIGHknowns before 0.30.0 Authorization Bypass via Misclassified Code ActionsEPSS 0.6%CVE-2026-88940MEDIUMknowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpointEPSS 0.6%CVE-2026-88938HIGHknowns through 0.33.0 Path Traversal via code.find MCP toolEPSS 0.5%CVE-2026-88939HIGHknowns through 0.33.0 Authorization Bypass via project.set Bootstrap ExemptionEPSS 0.5%CVE-2026-86539MEDIUMknowns through 0.33.0 Server-Side Request Forgery via embedding-models endpointEPSS 0.4%CVE-2026-86540HIGHknowns before 0.30.0 Arbitrary Code Execution via LSP BinaryEPSS 0.2%