PkgSeer

Vulnerabilities

Last updated 23 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
ash_ai AshAi sends unrecognized tool errors verbatim to MCP clients and the model, disclosing internal details Unknown 12 hours ago 11 hours ago
ash_ai Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records Unknown 2 months ago 2 months ago
ash_ai AshAi aggregate tool can read field-policy-protected fields Unknown 2 months ago 2 months ago
ash_ai EEx template evaluation of prompt content in AshAi enables remote code execution Unknown 2 months ago 2 months ago
ash_ai AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service Unknown 2 months ago 2 months ago
ash_ai AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error Unknown 2 months ago 2 months ago
ash_ai AshAi echoes raw tool exception messages into the conversation, disclosing internal details Unknown 2 months ago 2 months ago
ash_ai MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header Unknown 2 months ago 2 months ago
Data courtesy of OSV.dev
Page 1