Description
Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerability in Cline Kanban servers. At time of publication, there are no publicly available patches.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| cline | cline | <= 2.13.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | cline | <= 2.13.0 | — | GHSA-5c57-rqjx-35g2 |