DE
Vendor
Deepseek
8
CVEs
0
On KEV
2
New 30D
Products
HA7.3
Harness
DeepSeek
2 CVEs0 on KEV2 new
DE9.6
deepseek-harness
DeepSeek
2 CVEs0 on KEV0 new
DE6.1
Deepseek
Deepseek
1 CVEs0 on KEV0 new
DE8.8
Deepseek-r1
Deepseek
1 CVEs0 on KEV0 new
DE8.8
Deepseek-v2
Deepseek
1 CVEs0 on KEV0 new
DE8.8
Deepseek-v3
Deepseek
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116368 New | HA Harness DeepSeek | 7.3 | Oct 26 | DeepSeek Harness Browser Auth browser-auth.ts improper authorization |
| CVE-2026-116367 New | HA Harness DeepSeek | 6.3 | Oct 26 | DeepSeek Harness sandbox.ts createContext |
| CVE-2026-101132 | DE deepseek-harness DeepSeek | 3.1 | Sep 28 | DeepSeek deepseek-harness Bundle Patch profile.ts loadProfile path traversal |
| CVE-2026-82533 | DH DeepSeek Harness DeepSeek | 9.6 | Sep 8 | DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing |
| CVE-2025-63872 | DE Deepseek Deepseek | 6.1 | Dec 2 | DeepSeek V3.2 has a Cross Site Scripting (XSS) vulnerability, which allows JavaScript execution through model-generated SVG content |
| CVE-2025-26210 | DE Deepseek-r1 Deepseek | 8.8 | Sep 3 | DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepseeksvc.com domain |
