genkit vulnerabilities

1 known vulnerability in genkit from Genkit-ai. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  genkit: Improper Neutralization of HTTP Headers for Scripting Syntax

  CVE-2026-67179Aug 11, 2026Genkit-ai

  Genkit does not properly validate host request headers. Any host on the developer's network, and any website the developer visits (via DNS rebinding), can reach POST /api/runAction on the Dev UI server (default port 4000) and execute any registered Genkit acti