ouroboros vulnerabilities
2 known vulnerabilities in ouroboros from Q00. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest first
- 8.4 High severity
ouroboros: External Control of System or Configuration Setting
Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. Versions prior to 0.42.1 have an incomplete denylist. Several execution-routing keys of the same RCE class were omitted,
- 8.4 High severity
ouroboros: Untrusted Search Path
Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. In versions prior to 0.39.0, if a user clones a malicious repository and runs Ouroboros commands within that directory,