Vulnerabilities

DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerability in its web profile HTTP and WebSocket RPC control plane, allowing any local process, including tho…

DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the output_dir parameter.

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2.

A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2.

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3.

A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7.

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2.