open-multi-agent 1.5.0 through 1.21.2 Sandbox Escape via file_write Dangling Symlink
cve-program ·
https://www.npmjs.com: open-multi-agent
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
cve-program ·
https://www.npmjs.com: open-multi-agent
cve-program ·
Vendor product: JeecgBoot
cve-program ·
Vendor product: JeecgBoot
cve-program ·
Vendor product: JeecgBoot
cve-program ·
Vendor product: WeKnora
cve-program ·
Vendor product: Zen Cart
cve-program ·
Vendor product: janus-gateway
cve-program ·
Vendor product: Ollama
osv · GHSA-cm8m-24p9-hh65
npm: opencode2-linux-arm64-musl
osv · GHSA-xwcq-r6hw-mc5p
npm: opencode2-linux-arm64
osv · GHSA-6x5j-r784-fx6j
npm: opencode2-windows-x64
osv · GHSA-xr5m-85hf-27r5
npm: opencode2-windows-arm64
osv · GHSA-3jr5-3qvm-r54h
npm: opencode2-linux-x64
osv · GHSA-qx7m-vw4p-xv3j
npm: opencode2-linux-x64-musl
osv · GHSA-36mq-frp2-jc97
npm: opencode2-darwin-arm64
cve-program ·
Vendor product: SEMCMS
osv · GHSA-pmv2-r2q9-rmg9
npm: opencode2-darwin-x64
cve-program ·
https://github.com/keycloak/keycloak: keycloak · https://catalog.redhat.com/software/containers/: rhbk/keycloak-operator-bundle · https://catalog.redhat.com/software/containers/: rhbk/keycloak-rhel9
cve-program ·
Vendor product: MoguBlog
cve-program ·
Vendor product: jshERP
cve-program ·
Vendor product: Adobe Commerce · Vendor product: Adobe Commerce B2B · Vendor product: Magento Open Source
cve-program ·
Vendor product: jshERP
cve-program ·
Vendor product: LogicalDOC Community Edition
cve-program ·
Vendor product: lamp-cloud
cve-program ·
Vendor product: n/a
cve-program ·
Vendor product: py-shiny
cve-program ·
Vendor product: vikunja
cve-program ·
Vendor product: vikunja
cve-program ·
Vendor product: opensource-socialnetwork
cve-program ·
Vendor product: spotweb
cve-program ·
Vendor product: openapi-typescript-codegen
cve-program ·
https://www.npmjs.com/package/@1mcp/agent: @1mcp/agent
cve-program ·
Vendor product: E1700
cve-program ·
https://pypi.org/project/sglang: sglang
cve-program ·
Vendor product: SHAREit App
cve-program ·
Vendor product: Pimcore
cve-program ·
Vendor product: LogicalDOC Community Edition
cve-program ·
Vendor product: php-image-resize
cve-program ·
Vendor product: MPOS M6 PLUS
cve-program ·
Vendor product: ImageMagick · Vendor product: ImageMagick
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.