The-Pocket

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

The-Pocket records in CISA KEV

No The-Pocket vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-40245 CVE-2026-55747 · GHSA-8v55-7p5p-6r5c

PocketFlow - Path Traversal in pocketflow-coding-agent Cookbook Example File Tools

LOW 32

The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.join(workdir, p) wrapper with no canonicalization or containment check, used unguarded by the ReadFile, ListFile…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00349 Published 2026-08-05 No fix listed CWE-22

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0