knowns-dev vulnerabilities

Newest CVEs

• CVE-2026-88940

  knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint

  knowns-dev · knowns

  Medium6.9
• CVE-2026-88939

  knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption

  knowns-dev · knowns

  High8.7
• CVE-2026-88938

  knowns through 0.33.0 Path Traversal via code.find MCP tool

  knowns-dev · knowns

  High7.1
• CVE-2026-88937

  knowns through 0.33.0 Path Traversal via Template Engine

  knowns-dev · knowns

  High8.6
• CVE-2026-88899

  knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header

  knowns-dev · knowns

  Critical9.3
• CVE-2026-86775

  knowns before 0.30.0 Path Traversal via Document API

  knowns-dev · knowns

  High8.8
• CVE-2026-86544

  knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions

  knowns-dev · knowns

  High7.2
• CVE-2026-86543

  knowns before 0.30.0 Unauthenticated Management API Exposure

  knowns-dev · knowns

  Critical9.3
• CVE-2026-86542

  knowns before 0.30.0 Path Traversal via Import Name

  knowns-dev · knowns

  High8.8
• CVE-2026-86541

  knowns before 0.30.0 Path Traversal via code.replace MCP action

  knowns-dev · knowns

  High7.2