Vulnerabilidades em knowns-dev
14 resultadosAnálise Vexday
A knowns-dev apresenta 9 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando descoberta recente e concentrada de falhas de segurança. Embora nenhuma esteja sob ataque ativo registrado no momento, a dominância de vulnerabilidades de path traversal (CWE-22) sugere fragilidade em validação de entrada, com 1 vulnerabilidade crítica que requer atenção prioritária.
CVE-2026-86439HIGHknowns before 0.30.0 Path Traversal via MCP doc and memory toolsEPSS 0.8%CVE-2026-86538HIGHknowns before 0.30.0 Path Traversal via templateFile parameterEPSS 0.7%CVE-2026-86541HIGHknowns before 0.30.0 Path Traversal via code.replace MCP actionEPSS 0.5%CVE-2026-88937HIGHknowns through 0.33.0 Path Traversal via Template EngineEPSS 0.5%CVE-2026-86775HIGHknowns before 0.30.0 Path Traversal via Document APIEPSS 0.5%CVE-2026-86542HIGHknowns before 0.30.0 Path Traversal via Import NameEPSS 0.5%CVE-2026-88940MEDIUMknowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpointEPSS 0.5%CVE-2026-86543CRITICALknowns before 0.30.0 Unauthenticated Management API ExposureEPSS 0.4%CVE-2026-88899CRITICALknowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory HeaderEPSS 0.4%CVE-2026-88938HIGHknowns through 0.33.0 Path Traversal via code.find MCP toolEPSS 0.3%CVE-2026-86544HIGHknowns before 0.30.0 Authorization Bypass via Misclassified Code ActionsEPSS 0.3%CVE-2026-88939HIGHknowns through 0.33.0 Authorization Bypass via project.set Bootstrap ExemptionEPSS 0.3%CVE-2026-86539MEDIUMknowns through 0.33.0 Server-Side Request Forgery via embedding-models endpointEPSS 0.2%CVE-2026-86540HIGHknowns before 0.30.0 Arbitrary Code Execution via LSP BinaryEPSS 0.1%