All 3 CVE vulnerabilities found in kan, with AI-generated Chinese analysis, references, and POCs.
Vendor: kanbn
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-110628 | Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchment CWE-918 | 8.6 | High | 2026-10-14 |
| CVE-2026-92802 | kan through 0.6.0 Authorization Bypass via GitHub Project Import CWE-862 | 4.3 | Medium | 2026-09-16 |
| CVE-2026-32255 | Kan is Vulnerable to Unauthenticated SSRF via Attachment Download Endpoint CWE-918 | 8.6 | High | 2026-03-18 |
All 3 known CVE vulnerabilities affecting kan with full Chinese analysis, references, and POCs where available.