Vulnerabilities

TI-2026-22893 CVE-2026-28677

OpenSift: Insufficient URL destination restrictions in ingest flow could enable SSRF-style internal access

MEDIUM 42

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00339 Published 2026-03-06 Fixed in 1.6.3-alpha CWE-918

TI-2026-22892 CVE-2026-28676

MEDIUM 41

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0049 Published 2026-03-06 Fixed in 1.6.3-alpha CWE-22

TI-2026-22891 CVE-2026-28675

LOW 30

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00292 Published 2026-03-06 Fixed in 1.6.3-alpha CWE-200

TI-2026-21626 CVE-2026-27189

LOW 28

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.

CVSS 3.1MEDIUM 6.6 Local Low privileges No interaction EPSS 0.00124 Published 2026-02-21 Fixed in 1.1.3-alpha CWE-362

TI-2026-21612 CVE-2026-27170

LOW 31

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00206 Published 2026-02-20 Fixed in 1.1.3-alpha CWE-20

TI-2026-21611 CVE-2026-27169

LOW 39

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.

CVSS 3.1HIGH 8.9 Network Low privileges User interaction EPSS 0.00392 Published 2026-02-20 Fixed in 1.1.3-alpha CWE-116