JO
Vendor
Jovancoding
16
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109332 | NE Network-AI Jovancoding | 3.1 | Oct 12 | Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE Transport |
| CVE-2026-109331 | NE Network-AI Jovancoding | 7.4 | Oct 12 | Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTarget |
| CVE-2026-109330 | NE Network-AI Jovancoding | 4.3 | Oct 12 | Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hijacking via DashboardServer |
| CVE-2026-73615 | NE Network-AI Jovancoding | 8.8 | Aug 13 | Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch |
| CVE-2026-73614 | NE Network-AI Jovancoding | 8.8 | Aug 13 | Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation |
| CVE-2026-58484 | NE Network-AI Jovancoding | 7.1 | Jul 20 | Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning |
| CVE-2026-58482 | NE Network-AI Jovancoding | 5.9 | Jul 20 | Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions |
| CVE-2026-46701 | NE Network-AI Jovancoding | 7.6 | Jul 20 | Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret |
| CVE-2026-58481 | NE Network-AI Jovancoding | 6.5 | Jul 20 | Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory |
| CVE-2026-58414 | NE Network-AI Jovancoding | 5.5 | Jul 20 | Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups |
| CVE-2026-58413 | NE Network-AI Jovancoding | 6.1 | Jul 20 | EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data |
| CVE-2026-54051 | NE Network-AI Jovancoding | 9.9 | Jul 20 | Network-AI has an an OS Command Injection issue |
| CVE-2026-64623 | NE Network-AI Jovancoding | 8.6 | Jul 20 | Network-AI before 5.13.4 Cryptographic Signature Verification Bypass |
| CVE-2026-64622 | NE Network-AI Jovancoding | 7.5 | Jul 20 | Network-AI 5.12.2 through 5.13.3 Missing Authorization via ApprovalInbox |
| CVE-2026-48814 | NE Network-AI Jovancoding | 9.1 | Jun 17 | Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701) |
| CVE-2026-42856 | NE Network-AI Jovancoding | 8.7 | May 11 | Network-AI: Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool calls |