network-ai vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-48X2-6PR9-2JJFMediumnetwork-ai: Network-AI: EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data GHSA-6X2M-P4XP-WG22Mediumnetwork-ai: Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups GHSA-MXJX-28VX-XJJJMediumnetwork-ai: Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions GHSA-JVCM-F35G-W78PMediumnetwork-ai: Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory GHSA-2FMP-9RVW-HC96Highnetwork-ai: Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning CVE-2026-54051Criticalnetwork-ai: Network-AI: Improper Neutralization of Special Elements used in an OS Command CVE-2026-48814Criticalnetwork-ai: Network-AI: CVE-2026-46701 fix incomplete — empty default secret still authorizes all requests CVE-2026-46701Highnetwork-ai: Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret CVE-2026-42856Highnetwork-ai: Network-AI missing authentication on MCP HTTP endpoint, which allows unauthenticated privileged tool calls

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo