Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Jovancoding Network-AI 5.15.2 Clear all filters
TI-2026-71148 CVE-2026-109332 · GHSA-pfmh-9x5p-7vh5

CORS origin validation error in Network-AI MCP SSE transport

Priority MEDIUM 45

Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer._handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind…

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00143 Published 2026-10-12 Fixed in 5.15.2 CWE-346
TI-2026-71147 CVE-2026-109331 · GHSA-8x93-4278-4f5c

Deny pattern bypass in Network-AI ClaudeHookBridge hook

Priority LOW 34

Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook, which matches deny patterns only against the first present candidate field.

CVSS 4.0HIGH 7.5 Local No auth No interaction EPSS 0.00135 Published 2026-10-12 Fixed in 5.15.2 CWE-436
TI-2026-71146 CVE-2026-109330 · GHSA-q84g-m42h-q9rc

Cross-site WebSocket hijacking in Network-AI DashboardServer

Priority MEDIUM 57

Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpgrade performs no Origin or token validat…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00182 Published 2026-10-12 Fixed in 5.15.2 CWE-1385