All products

agents

npm · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Cloudflare Agents SDK has Insecure Direct Object Reference (IDOR) via Header-Based Email RoutingCVE-2026-1664 · GHSA-R7X9-8PH7-W8CG agents npm Medium Fix reported
Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground siteGHSA-W5CR-2QHR-JQC5 agents npm Medium Fix reported
Cloudflare Agents is Vulnerable to Reflected Cross-Site Scripting in the AI Playground's OAuth callback handlerCVE-2026-1721 · GHSA-CVHV-6XM6-C3V4 agents npm Medium Fix reported