Steipete vulnerabilities
We track 5 vulnerabilities in Steipete products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on June 11, 2026.
Latest Steipete vulnerabilities
- 7.4 High severity
summarize: Server-Side Request Forgery
Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS feed to direct the host to fetch transcript content from loopback addresses, link-local addresses, RFC 1918 private ranges, or other re
- 7.1 High severity
CodexBar: Improper Link Resolution Before File Access
CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build artifacts by exploiting predictable file paths in the release notarization workflow. Attackers
- 7.1 High severity
CodexBar prior to 0.32.0 contains a privilege escalation vulnerability in the CLI installer…
CodexBar prior to 0.32.0 contains a privilege escalation vulnerability in the CLI installer that allows local attackers to execute arbitrary commands as root by exploiting a race condition in temporary file handling. The installer creates a temporary file with
- 7.4 High severity
summarize: Server-Side Request Forgery
Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links, causing the extension to make authenticated daemon requests using stored tokens w
- 7.1 High severity
summarize: Missing Authorization
Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize daemon endpoint that allows authenticated callers to write files to arbitrary directories by supplying an absolute path or directory traversal sequence in the slidesDir requ