Vendors / DeepSeek Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now DeepSeek records in CISA KEV No DeepSeek vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepseeksvc.com domain.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00603 · Published 2025-09-03 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00294 · Published 2026-10-26 · No fix listed CWE-264
Priority MEDIUM 45
A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2.
CVSS 4.0 LOW 2.3· Network · No auth · User interaction · EPSS 0.00436 · Published 2026-09-28 · No fix listed CWE-22
Priority MEDIUM 45
DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of…
CVSS 4.0 CRITICAL 9.4· Network · No auth · User interaction · EPSS 0.01238 · Published 2026-09-08 · Fixed in 0.1.2-alpha.1 CWE-807
Priority LOW 37
A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00583 · Published 2026-10-26 · No fix listed CWE-266
Priority LOW 27
DeepSeek V3.2 has a Cross Site Scripting (XSS) vulnerability, which allows JavaScript execution through model-generated SVG content.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00274 · Published 2025-12-02 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 1 3 1 0
THREATIST.IORead the docs