CWE-265

CVEs per yearBy the year they were published

1. 20201
2. 20232
3. 20241
4. 20252
5. 20269

Newest CVEs

• CVE-2026-116367

  DeepSeek Harness sandbox.ts createContext

  DeepSeek · Harness

  Medium5.3
• CVE-2026-108788

  deepseek-ai deepseek-harness Sandbox spawn sandbox

  deepseek-ai · deepseek-harness

  Medium4.8
• CVE-2026-101102

  deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox

  deepseek-ai · deepseek-harness

  Medium5.3
• CVE-2026-18593

  vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandbox

  vxcontrol · PentAGI

  Medium6.3
• CVE-2026-14784

  vxcontrol PentAGI Docker API client.go sandbox

  vxcontrol · PentAGI

  Medium5.3
• CVE-2026-9368

  NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandbox

  NousResearch · hermes-agent

  Medium6.9
• CVE-2026-6878

  ByteDance verl grader.py math_equal sandbox

  ByteDance · verl

  Medium6.3
• CVE-2026-6224

  nocobase plugin-workflow-javascript Vm.js createSafeConsole sandbox

  nocobase · plugin-workflow-javascript

  Medium6.9
• CVE-2026-6117

  AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox

  AstrBotDevs · AstrBot

  Medium5.3
• CVE-2025-5874

  Redash getattr python.py run_query sandbox

  Redash

  Low2.1

Vendors it comes up for most

1. deepseek-ai2
2. vxcontrol2
3. AstrBotDevs1
4. ByteDance1
5. DeepSeek1
6. Facebook1
7. HimitZH1
8. NousResearch1
9. OpenBMB1
10. aimhubio1