Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

knowns — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in knowns, with AI-generated Chinese analysis, references, and POCs.

Vendor: knowns-dev

CVE ID Title CVSS Severity Published
CVE-2026-88940 knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint CWE-22 5.3 Medium 2026-09-10
CVE-2026-88939 knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption CWE-863 8.3 High 2026-09-10
CVE-2026-88937 knowns through 0.33.0 Path Traversal via Template Engine CWE-22 8.8 High 2026-09-10
CVE-2026-88938 knowns through 0.33.0 Path Traversal via code.find MCP tool CWE-22 6.5 Medium 2026-09-10
CVE-2026-88899 knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header CWE-73 9.8 Critical 2026-09-10
CVE-2026-86775 knowns before 0.30.0 Path Traversal via Document API CWE-22 8.6 High 2026-09-09
CVE-2026-86544 knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions CWE-863 8.1 High 2026-09-07
CVE-2026-86543 knowns before 0.30.0 Unauthenticated Management API Exposure CWE-306 9.8 Critical 2026-09-07
CVE-2026-86542 knowns before 0.30.0 Path Traversal via Import Name CWE-22 9.1 Critical 2026-09-07
CVE-2026-86540 knowns before 0.30.0 Arbitrary Code Execution via LSP Binary CWE-78 7.8 High 2026-09-07
CVE-2026-86541 knowns before 0.30.0 Path Traversal via code.replace MCP action CWE-22 8.3 High 2026-09-07
CVE-2026-86539 knowns through 0.33.0 Server-Side Request Forgery via embedding-models endpoint CWE-918 7.2 High 2026-09-07
CVE-2026-86538 knowns before 0.30.0 Path Traversal via templateFile parameter CWE-22 7.5 High 2026-09-07
CVE-2026-86439 knowns before 0.30.0 Path Traversal via MCP doc and memory tools CWE-22 8.8 High 2026-09-07

All 14 known CVE vulnerabilities affecting knowns with full Chinese analysis, references, and POCs where available.