hkuds

Top products

The 15 most recently published vulnerabilities affecting hkuds.

• CVE-2026-58173Vibe-Trading < 0.1.10 - Path Traversal via Persistent Memory Type6.5Jun 30, 2026
• CVE-2026-58171Vibe-Trading < 0.1.10 - Path Traversal via Swarm Run Identifier4.2Jun 30, 2026
• CVE-2026-58170Vibe-Trading < 0.1.10 - Path Traversal in Proposal Identifier Allows Forging Live Trading Mandates8.3Jun 30, 2026
• CVE-2026-58169Vibe-Trading < 0.1.10 - Loopback Trust and Missing Host Validation Enable DNS-Rebinding Authentication Bypass and Remote Code Execution7.5Jun 30, 2026
• CVE-2026-58168DeepTutor < 1.4.10 - Insecure Default Grants Unrestricted MCP Tool Access to Non-Admin Users8.8Jun 30, 2026
• CVE-2026-56696OpenHarness - Prompt Injection via /issue and /pr_comments Slash Commands5.4Jun 23, 2026
• CVE-2026-56695OpenHarness - Cross-Session Disclosure via /resume and /summary Commands6.5Jun 23, 2026
• CVE-2026-48716nanobot: Path traversal via unsanitized WhatsApp document fileName enables arbitrary file write8.7Jun 18, 2026
• CVE-2026-12203HKUDS AI-Trader Research Export agents.csv information disclosure5.3Jun 15, 2026
• CVE-2026-49140Nanobot < 0.2.1 Denial of Service via Matrix Media Download Handler4.3Jun 1, 2026
• CVE-2026-49138Nanobot < 0.2.1 SSRF via web_fetch Tool Redirect Following5.0Jun 1, 2026
• CVE-2026-32847DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.py7.5May 28, 2026
• CVE-2026-7551HKUDS OpenHarness Remote Command Execution via /bridge Slash Command8.8Apr 30, 2026
• CVE-2026-6823HKUDS OpenHarness Insecure Default Remote Channel Allowlist8.2Apr 21, 2026
• CVE-2026-6819HKUDS OpenHarness Plugin Management Command Exposure8.8Apr 21, 2026