Security
فارسی
All products

network-ai

npm · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruningCVE-2026-58484 · GHSA-2FMP-9RVW-HC96 network-ai npm High Fix reported
Network-AI: EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment dataCVE-2026-58413 · GHSA-48X2-6PR9-2JJF network-ai npm Medium Fix reported
Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions CVE-2026-58482 · GHSA-MXJX-28VX-XJJJ network-ai npm Medium Fix reported
Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directoryCVE-2026-58481 · GHSA-JVCM-F35G-W78P network-ai npm Medium Fix reported
Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backupsCVE-2026-58414 · GHSA-6X2M-P4XP-WG22 network-ai npm Medium Fix reported
Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default SecretCVE-2026-46701 · GHSA-J3VX-CX2R-PVG8 network-ai npm High Fix reported
Network-AI: CVE-2026-46701 fix incomplete — empty default secret still authorizes all requestsCVE-2026-48814 · GHSA-R78R-RWRF-RJWP network-ai npm Critical Fix reported
Network-AI: Improper Neutralization of Special Elements used in an OS Command CVE-2026-54051 · GHSA-QW6V-5FCF-5666 network-ai npm Critical Fix reported
Network-AI missing authentication on MCP HTTP endpoint, which allows unauthenticated privileged tool callsCVE-2026-42856 · GHSA-FJ4G-2P96-Q6M3 network-ai npm High Fix reported