Jovancoding
13 CVEs tracked since 2026. Since Jul 2026, none of them reached CISA KEV.
Jovancoding CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-07 | 9 | 0 |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 11 or fewer | |
| 2026-11 | 4 | 0 |
Products
The products that kept showing up in Jovancoding's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Jovancoding.
- CVE-2026-120313Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath7.5
- CVE-2026-120314Network-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task Operations7.3
- CVE-2026-120312Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name8.8
- CVE-2026-120311Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID8.8
- CVE-2026-109332Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE Transport3.1
- CVE-2026-109331Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTarget7.4
- CVE-2026-109330Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hijacking via DashboardServer4.3
- CVE-2026-73614Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation8.8
- CVE-2026-73615Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch8.8
- CVE-2026-58484Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning7.1
- CVE-2026-58482Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions5.9
- CVE-2026-46701Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret7.6
- CVE-2026-58481Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory6.5
- CVE-2026-58414Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups5.5
- CVE-2026-58413EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data6.1
The record
- Peak rank
- #7 in Nov 2026
- Busiest month shown
- Jul 2026, 9 CVEs
- Months with a KEV entry
- 0 since Jul 2026
- Monthly snapshots
- 2 since 2026