Skip to content
OpenAdvisories

Vendor

getcursor

4 known vulnerabilities.

Products

cursor 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2025-49150

    Cursor Agent Potentially Leaks Information using JSON schema

    Cursor is a code editor built for programming with AI. Prior to 0.51.0, by default, the setting json.schemaDownload.enable was set to True. This means that by writing a JSON file, an attacker can trigger an arbitrary HTTP GET request that does not require use…

    getcursor cursor