Skip to content
OpenAdvisories

Vendor

santifer

1 known vulnerabilities.

Products

career-ops 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2026-88061

    career-ops: Local dashboard API accepted cross-origin and non-loopback requests, allowing unauthenticated command execution

    career-ops is an open-source AI-assisted job search and application management tool. Prior to 0.8.0, the career-ops local web dashboard web/ exposed command-spawning and user-file-writing /api routes without validating request origin or restricting clients to…

    santifer career-ops