Skip to content
OpenAdvisories

Vendor

The-Pocket

1 known vulnerabilities.

Products

PocketFlow (pocketflow-coding-agent cookbook example) 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-55747

    PocketFlow - Path Traversal in pocketflow-coding-agent Cookbook Example File Tools

    The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.join(workdir, p) wrapper with no canonicalization or containment check, used unguarded by the ReadFile, ListFiles, PatchRead, and PatchApply file-acces…

    The-Pocket PocketFlow (pocketflow-coding-agent cookbook example)