Vulnerabilities
Last updated 53 minutes ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
Paperclip: OS Command Injection via Execution Workspace cleanupCommand | Critical 9.8 | 6 months ago | 10 hours ago |
|
|
paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass | Critical 10.0 | 6 months ago | 5 months ago |
|
|
Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution | High Risk 8.8 | 6 months ago | 5 months ago |
|
|
Paperclip: Unauthenticated Access to Multiple API Endpoints in Authenticated Mode | High Risk 8.3 | 6 months ago | 6 months ago |
|
|
Paperclip: Malicious skills able to exfiltrate and destroy all user data | High Risk 7.3 | 6 months ago | 6 months ago |
|
|
Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperclip server | Medium Risk 4.3 | 6 months ago | 6 months ago |
|
|
Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise | Critical 9.9 | 6 months ago | 6 months ago |
|
|
Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys | Critical 9.9 | 6 months ago | 6 months ago |
Page 1