DE
Vendor
Deepseek
6 products with CVEs on record
8
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116368
New
HA
Harness
DeepSeek
7.3
1%
Oct 26DeepSeek Harness Browser Auth browser-auth.ts improper authorization
CVE-2026-116367
New
HA
Harness
DeepSeek
6.3
0%
Oct 26DeepSeek Harness sandbox.ts createContext
CVE-2026-101132
DE
deepseek-harness
DeepSeek
3.1
0%
Sep 28DeepSeek deepseek-harness Bundle Patch profile.ts loadProfile path traversal
CVE-2026-82533
DH
DeepSeek Harness
DeepSeek
9.6
1%
Sep 8DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing
CVE-2025-63872
DE
Deepseek
Deepseek
6.1
0%
Dec 2DeepSeek V3.2 has a Cross Site Scripting (XSS) vulnerability, which allows JavaScript execution through model-generated SVG content
CVE-2025-26210
DE
Deepseek-r1
Deepseek
8.8
1%
Sep 3DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepseeksvc.com domain