Vulnerabilities

TI-2026-61717 CVE-2026-90814 · GHSA-fwp2-vg7p-f8x2

cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery

MEDIUM 57

A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-09-14 No fix listed CWE-918

TI-2026-61716 CVE-2026-90813 · GHSA-9hv7-6jr2-3g59

MEDIUM 57

A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00554 Published 2026-09-14 No fix listed CWE-179

TI-2026-61715 CVE-2026-90812 · GHSA-27qc-j388-jw8p

MEDIUM 57

A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00385 Published 2026-09-14 No fix listed CWE-266

TI-2026-61714 CVE-2026-90811 · GHSA-x845-4vjw-3f37

MEDIUM 55

A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00149 Published 2026-09-14 No fix listed CWE-200

TI-2026-61713 CVE-2026-90810 · GHSA-xm72-m8gr-4jp8

MEDIUM 57

A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-09-14 No fix listed CWE-266

TI-2026-15525 CVE-2026-18998 · GHSA-7hmv-r6w5-pr73

MEDIUM 57

A vulnerability was determined in cosmicstack-labs mercury-agent up to 1.1.12.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-08-06 No fix listed CWE-266

TI-2026-15524 CVE-2026-18997 · GHSA-9hrj-55h5-5mr2

MEDIUM 57

A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-08-06 No fix listed CWE-285

TI-2026-15523 CVE-2026-18996 · GHSA-ccg4-hv3q-9622

MEDIUM 57

A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00427 Published 2026-08-06 No fix listed CWE-266