KN
Product
knowns
by knowns-dev · last CVE Sep 10, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 9Medium 2Low 0
Watch

Add knowns to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-88899
9.8
1%
Sep 10
knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header
Affected: before 0.31.0
CVE-2026-86543
9.8
1%
Sep 7
knowns before 0.30.0 Unauthenticated Management API Exposure
Affected: before 0.30.0
CVE-2026-86542
9.1
1%
Sep 7
knowns before 0.30.0 Path Traversal via Import Name
Affected: before 0.30.0
CVE-2026-88937
8.8
1%
Sep 10
knowns through 0.33.0 Path Traversal via Template Engine
Affected: through 0.33.0
CVE-2026-86439
8.8
1%
Sep 7
knowns before 0.30.0 Path Traversal via MCP doc and memory tools
Affected: before 0.30.0
CVE-2026-86775
8.6
1%
Sep 9
knowns before 0.30.0 Path Traversal via Document API
Affected: before 0.30.0
CVE-2026-88939
8.3
0%
Sep 10
knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption
Affected: through 0.33.0
CVE-2026-86541
8.3
1%
Sep 7
knowns before 0.30.0 Path Traversal via code.replace MCP action
Affected: before 0.30.0
CVE-2026-86544
8.1
1%
Sep 7
knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions
Affected: before 0.30.0
CVE-2026-86540
7.8
0%
Sep 7
knowns before 0.30.0 Arbitrary Code Execution via LSP Binary
Affected: before 0.30.0
CVE-2026-86538
7.5
1%
Sep 7
knowns before 0.30.0 Path Traversal via templateFile parameter
Affected: before 0.30.0
CVE-2026-86539
7.2
0%
Sep 7
knowns through 0.33.0 Server-Side Request Forgery via embedding-models endpoint
Affected: through 0.33.0
CVE-2026-88938
6.5
0%
Sep 10
knowns through 0.33.0 Path Traversal via code.find MCP tool
Affected: through 0.33.0
CVE-2026-88940
5.3
1%
Sep 10
knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint
Affected: through 0.33.0
Showing 14