KN
Vendor
knowns-dev
14
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-88940 | KN knowns knowns-dev | 5.3 | Sep 10 | knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint |
| CVE-2026-88939 | KN knowns knowns-dev | 8.3 | Sep 10 | knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption |
| CVE-2026-88938 | KN knowns knowns-dev | 6.5 | Sep 10 | knowns through 0.33.0 Path Traversal via code.find MCP tool |
| CVE-2026-88937 | KN knowns knowns-dev | 8.8 | Sep 10 | knowns through 0.33.0 Path Traversal via Template Engine |
| CVE-2026-88899 | KN knowns knowns-dev | 9.8 | Sep 10 | knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header |
| CVE-2026-86775 | KN knowns knowns-dev | 8.6 | Sep 9 | knowns before 0.30.0 Path Traversal via Document API |
| CVE-2026-86544 | KN knowns knowns-dev | 8.1 | Sep 7 | knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions |
| CVE-2026-86543 | KN knowns knowns-dev | 9.8 | Sep 7 | knowns before 0.30.0 Unauthenticated Management API Exposure |
| CVE-2026-86542 | KN knowns knowns-dev | 9.1 | Sep 7 | knowns before 0.30.0 Path Traversal via Import Name |
| CVE-2026-86541 | KN knowns knowns-dev | 8.3 | Sep 7 | knowns before 0.30.0 Path Traversal via code.replace MCP action |
| CVE-2026-86540 | KN knowns knowns-dev | 7.8 | Sep 7 | knowns before 0.30.0 Arbitrary Code Execution via LSP Binary |
| CVE-2026-86539 | KN knowns knowns-dev | 7.2 | Sep 7 | knowns through 0.33.0 Server-Side Request Forgery via embedding-models endpoint |
| CVE-2026-86538 | KN knowns knowns-dev | 7.5 | Sep 7 | knowns before 0.30.0 Path Traversal via templateFile parameter |
| CVE-2026-86439 | KN knowns knowns-dev | 8.8 | Sep 7 | knowns before 0.30.0 Path Traversal via MCP doc and memory tools |