Skip to content
OpenAdvisories

Vendor

knowns-dev

14 known vulnerabilities.

Products

knowns 14
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-88940

    knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint

    knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesystem. Attackers can traverse the directory structure to locate project directorie…

    knowns-dev knowns
  • Medium 6.5
    CVE-2026-88938

    knowns through 0.33.0 Path Traversal via code.find MCP tool

    knowns through 0.33.0 fails to confine the path argument of the code.find MCP tool to the project root, allowing AI agent sessions to read source files anywhere on the host. Attackers can supply absolute paths or relative traversal sequences to the path argum…

    knowns-dev knowns