Advisories · Technology
Jovancoding Network-AI.
Every CVE that names Jovancoding Network-AI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Network-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task Operations
- Jovancoding Network-AI
- Authentication bypass
- CVSS 8.7 High
Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath
- Jovancoding Network-AI
- Path traversal
- CVSS 8.7 High
Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name
- Jovancoding Network-AI
- Path traversal
- CVSS 8.7 High
Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID
- Jovancoding Network-AI
- Path traversal
- CVSS 2.3 Low
Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE Transport
- Jovancoding Network-AI
- CWE-346
- CVSS 7.5 High
Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTarget
- Jovancoding Network-AI
- CWE-436
- CVSS 5.3 Medium
Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hijacking via DashboardServer
- Jovancoding Network-AI
- CWE-1385
- CVSS 8.7 High
Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch
- Jovancoding Network-AI
- CWE-436
- CVSS 8.7 High
Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation
- Jovancoding Network-AI
- CWE-436
- CVSS 8.8 High
Network-AI before 5.13.4 Cryptographic Signature Verification Bypass
- Jovancoding Network-AI
- Weak cryptography or TLS
- CVSS 9.3 CriticalCritical · CVSS 9+
Network-AI 5.12.2 through 5.13.3 Missing Authorization via ApprovalInbox
- Jovancoding Network-AI
- Broken access control