Vitali87 vulnerabilities
We track 2 vulnerabilities in Vitali87 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Vitali87 vulnerabilities
- 7.1 High severity
code-graph-rag: Improper Limitation of a Pathname to a Restricted Directory
Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing multi-language codebases. Prior to 0.0.589, AstGrepService in codebase_rag/tools/ast_grep_service.py enumerates files beneath project_root and relies
- 7.5 High severity
code-graph-rag: Improper Limitation of a Pathname to a Restricted Directory
Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing multi-language codebases. Prior to 0.0.345, the MCPToolsRegistry.read_file implementation in codebase_rag/mcp/tools.py joins attacker-controlled file_