Skip to content
OpenAdvisories

Vendor

AsyncFuncAI

4 known vulnerabilities.

Products

deepwiki-open 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-103591

    DeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/file

    DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET /codemap/file endpoint via the repo_url parameter. Attackers can supply a non-URL repo_url value to bypass path containment checks and read any file …

    AsyncFuncAI deepwiki-open
  • High 7.5
    CVE-2026-90946

    DeepWiki-Open through commit d92819a Arbitrary File Read via /ws/chat WebSocket

    DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket endpoint that accepts repo_url as a filesystem path with no containment. Attackers can supply arbitrary directory paths to read all fi…

    AsyncFuncAI deepwiki-open
  • High 7.5
    CVE-2026-72602

    AsyncFuncAI deepwiki-open - Path Traversal

    A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to obtain directory listings for arbitrary filesystem paths via the local-repository structure endpoint. The endpoint accepts an absolut…

    AsyncFuncAI deepwiki-open