Dep0we vulnerabilities
We track 2 vulnerabilities in Dep0we products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Dep0we vulnerabilities
- 7.5 High severity
atomic-agents-stack: Improper Limitation of a Pathname to a Restricted Directory
atomic-agents-stack before 1.1.0 contains a path traversal vulnerability in the dashboard HTTP server that allows remote attackers to read arbitrary files by supplying directory traversal sequences in request paths. Attackers can bypass path containment checks
- 8.1 High severity
atomic-agents-stack: Cleartext Transmission of Sensitive Information
atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowing network man-in-the-middle attackers to rewrite catalog responses. Attackers can inject arbitrary command and argument values that are spaw