Products: 1
    Vulnerabilities: 6
    Known Exploited: 0
    0
    Critical Level Threats
    3
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-107717

    Banks: User-controlled prompt input can be parsed as privileged chat messages

    Last Modified: Oct 13, 2026
    Published: Oct 08, 2026

    CVE-2026-107716

    Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

    Last Modified: Oct 09, 2026
    Published: Oct 08, 2026

    CVE-2026-71492

    Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root

    Last Modified: Aug 20, 2026
    Published: Aug 20, 2026

    CVE-2026-61536

    Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE

    Last Modified: Jul 31, 2026
    Published: Jul 30, 2026

    CVE-2026-62663

    Banks: Arbitrary File Read via Path Traversal in Media Filters (image/audio/video/document)

    Last Modified: Aug 02, 2026
    Published: Jul 30, 2026
    Items Per Page
    Masci Vulnerabilities & Security CVEs | CVE-DB