Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-101079

agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be initiated from a local position. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS 4.0 · 2.4 Low EPSS < 1% KEV · Not listed
Vendors
Agentverus
Products
Agentverus-scanner
CVE-2026-84811

agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious __pycache__ entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports a CERTIFIED verdict with high trust scores in both static and semantic analysis modes.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Agentverus
Products
Agentverus-scanner