Asyncfuncai

4 CVEs in 1 Asyncfuncai product, including Deepwiki-Open. Newest: CVE-2026-103591 (2026-09-30). Severity, EPSS and public exploits for each.

Asyncfuncai products with known CVEs

ProductCVEs
Deepwiki-Open4
Asyncfuncai CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-103591High7.52026-09-30DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET /codemap/file endpoint via the repo_url parameter…
CVE-2026-90946High7.52026-09-14DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket endpoint that accepts repo_url as…
CVE-2026-72602High7.52026-08-11A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to obtain directory listings for arb…
CVE-2026-72567Critical9.82026-08-10An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to write to or delete arb…