MA
Vendor
masci
6
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107717 | BA banks masci | 6.5 | Oct 8 | Banks: User-controlled prompt input can be parsed as privileged chat messages |
| CVE-2026-107716 | BA banks masci | 7.3 | Oct 8 | Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry |
| CVE-2026-71492 | BA banks masci | 6.0 | Aug 20 | Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root |
| CVE-2026-61536 | BA banks masci | 7.5 | Jul 30 | Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE |
| CVE-2026-62663 | BA banks masci | 7.5 | Jul 30 | Banks: Arbitrary File Read via Path Traversal in Media Filters (image/audio/video/document) |
| CVE-2026-44209 | BA banks masci | 7.5 | May 26 | Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI |