All 4 CVE vulnerabilities found in deepseek-harness, with AI-generated Chinese analysis, references, and POCs.
Vendor: deepseek-ai
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-101132 | DeepSeek deepseek-harness Bundle Patch profile.ts loadProfile path traversal CWE-22 | 3.1 | Low | 2026-09-28 |
| CVE-2026-101131 | deepseek-ai deepseek-harness dsh index.ts reliance on untrusted inputs in a security decision CWE-807 | 3.3 | Low | 2026-09-28 |
| CVE-2026-101102 | deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox CWE-265 | 6.3 | Medium | 2026-09-28 |
| CVE-2026-101078 | deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation CWE-653 | 6.3 | Medium | 2026-09-28 |
All 4 known CVE vulnerabilities affecting deepseek-harness with full Chinese analysis, references, and POCs where available.