Skip to content
OpenAdvisories

Product · HKUDS

DeepCode

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-32847

    DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.py

    DeepCode through commit c991dc2 contains a path traversal vulnerability in the SPA catch-all route in new_ui/backend/main.py that allows unauthenticated attackers to read arbitrary files by supplying percent-encoded path segments to the GET /{full_path:path} …

    HKUDS DeepCode