Asyncfuncai Deepwiki-Open
3 CVEs affecting Asyncfuncai Deepwiki-Open. Latest disclosed: 2026-09-14. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-72567 | Critical | 9.8 | 2026-08-10 | An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to write to or delete arb… |
CVE-2026-90946 | High | 7.5 | 2026-09-14 | DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket endpoint that accepts repo_url as… |
CVE-2026-72602 | High | 7.5 | 2026-08-11 | A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to obtain directory listings for arb… |