Advisories · Technology
stitionai/devika.
Every CVE that names stitionai/devika among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+
Path Traversal in stitionai/devika
- stitionai/devika
- Path traversal
- CVSS 7.5 High
Injection by Prompt Injection in stitionai/devika
- stitionai/devika
- Other injection
- CVSS 7.5 High
Local File Inclusion in stitionai/devika
- stitionai/devika
- Path traversal
- CVSS 8.1 High
Data leak through CORS misconfiguration in stitionai/devika
- stitionai/devika
- CWE-346
- CVSS 8.1 High
Stored XSS in stitionai/devika
- stitionai/devika
- Cross-site scripting (XSS)
- CVSS 6.2 Medium
Local File Inclusion (LFI) in stitionai/devika
- stitionai/devika
- Path traversal
- CVSS 9.1 CriticalCritical · CVSS 9+
Path Traversal in stitionai/devika
- stitionai/devika
- CWE-29
- CVSS 8.1 High
CSRF Vulnerability in stitionai/devika
- stitionai/devika
- Cross-site request forgery (CSRF)
- CVSS 7.6 High
Unprotected WebSocket in stitionai/devika
- stitionai/devika
- Broken access control
- CVSS 7.5 High
Directory Traversal in stitionai/devika
- stitionai/devika
- Path traversal
- CVSS 7.5 High
Directory Traversal in stitionai/devika
- stitionai/devika
- Path traversal
- CVSS 7.5 High
Local File Read in stitionai/devika
- stitionai/devika
- Path traversal