CVE Tools

Jovancoding

13 CVEs tracked since 2026. Since Jul 2026, none of them reached CISA KEV.

Jovancoding CVEs per month

Jul 2026 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Jovancoding CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0790
2026-088 or fewer
2026-099 or fewer
2026-1011 or fewer
2026-1140

Products

The products that kept showing up in Jovancoding's monthly top three, with their CVEs summed over those months.

  1. Network-ai132 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Jovancoding.

  1. CVE-2026-120313Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath7.5
  2. CVE-2026-120314Network-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task Operations7.3
  3. CVE-2026-120312Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name8.8
  4. CVE-2026-120311Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID8.8
  5. CVE-2026-109332Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE Transport3.1
  6. CVE-2026-109331Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTarget7.4
  7. CVE-2026-109330Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hijacking via DashboardServer4.3
  8. CVE-2026-73614Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation8.8
  9. CVE-2026-73615Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch8.8
  10. CVE-2026-58484Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning7.1
  11. CVE-2026-58482Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions5.9
  12. CVE-2026-46701Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret7.6
  13. CVE-2026-58481Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory6.5
  14. CVE-2026-58414Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups5.5
  15. CVE-2026-58413EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data6.1

The record

Peak rank
#7 in Nov 2026
Busiest month shown
Jul 2026, 9 CVEs
Months with a KEV entry
0 since Jul 2026
Monthly snapshots
2 since 2026
Jovancoding's full record, month by month