Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

knowns-dev — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting knowns-dev. AI-powered Chinese analysis, POCs, and references for each vulnerability.

The vulnerability aggregation page for the vendor knowns-dev focuses on software security weaknesses and associated defect tags. This resource collects a comprehensive range of vulnerability records, including those related to cross-site scripting, injection flaws, and configuration errors, covering public disclosures from January 2022 through December 2024. By consolidating these data points, the page aims to provide a centralized view of the security posture and historical remediation efforts for the vendor's ecosystem. Readers can utilize this interface to track the vendor’s security advisories over time, gaining insight into their response patterns and prioritization of critical issues. Additionally, users can understand the prevalence and impact of specific weakness classes within knowns-dev products by analyzing aggregate trends and recurrence rates. The platform also supports looking up individual product versions to review their unique vulnerability histories, helping stakeholders assess risk exposure across different deployment scenarios. This structured approach facilitates informed decision-making for security teams, auditors, and developers who need to evaluate third-party components for potential liabilities. The data is sourced from verified public advisories, bug trackers, and certified database entries to ensure accuracy and reliability. By presenting this information in a unified format, the page reduces the friction involved in manual research and enables faster identification of systemic issues. It serves as a practical tool for continuous monitoring and compliance verification, allowing organizations to maintain a clearer understanding of the external threat landscape associated with knowns-dev software solutions.

Top products by knowns-dev: knowns
CVE ID Title CVSS Severity Published
CVE-2026-88940 knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint — knowns CWE-22 5.3 Medium 2026-09-10
CVE-2026-88939 knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption — knowns CWE-863 8.3 High 2026-09-10
CVE-2026-88937 knowns through 0.33.0 Path Traversal via Template Engine — knowns CWE-22 8.8 High 2026-09-10
CVE-2026-88938 knowns through 0.33.0 Path Traversal via code.find MCP tool — knowns CWE-22 6.5 Medium 2026-09-10
CVE-2026-88899 knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header — knowns CWE-73 9.8 Critical 2026-09-10
CVE-2026-86775 knowns before 0.30.0 Path Traversal via Document API — knowns CWE-22 8.6 High 2026-09-09
CVE-2026-86544 knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions — knowns CWE-863 8.1 High 2026-09-07
CVE-2026-86543 knowns before 0.30.0 Unauthenticated Management API Exposure — knowns CWE-306 9.8 Critical 2026-09-07
CVE-2026-86542 knowns before 0.30.0 Path Traversal via Import Name — knowns CWE-22 9.1 Critical 2026-09-07
CVE-2026-86540 knowns before 0.30.0 Arbitrary Code Execution via LSP Binary — knowns CWE-78 7.8 High 2026-09-07
CVE-2026-86541 knowns before 0.30.0 Path Traversal via code.replace MCP action — knowns CWE-22 8.3 High 2026-09-07
CVE-2026-86539 knowns through 0.33.0 Server-Side Request Forgery via embedding-models endpoint — knowns CWE-918 7.2 High 2026-09-07
CVE-2026-86538 knowns before 0.30.0 Path Traversal via templateFile parameter — knowns CWE-22 7.5 High 2026-09-07
CVE-2026-86439 knowns before 0.30.0 Path Traversal via MCP doc and memory tools — knowns CWE-22 8.8 High 2026-09-07

This page lists every published CVE security advisory associated with knowns-dev. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.