SudoScience

SudoScience CVE-2021-3156 deep dive...

dive

dive Una herramienta para explorar una imagen Docker, el contenido de sus capas y descubrir formas de reducir el tamaño de tu imagen Docker/OCI. Para analizar una imagen Docker simplemente ejecuta dive con una etiqueta/id/digest de imagen: dive O puedes usar dive directamente con Docker: alias...

dive Arbitrary File Write

dive suffers from an arbitrary file write vulnerability that occurs via a traversal. https://packetstorm.news/download/233044...

GO-2024-2912 vulnerabilities

Vulnerabilities for packages: dive...

GO-2024-2912 vulnerabilities

Vulnerabilities for packages: dive...

agixt (>=1.3.84, <=1.3.106), ai-dive (0.0.1) +8 more potentially affected by CVE-2026-9856 via transformers (4.30.1)

transformers PYPI version 4.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agixt =1.3.84, =1.15.3, =1.16.3, =0.0.1, =1.18.0rc1, =0.2.22, =0.2.32 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX...

agixt (>=1.3.84, <=1.3.106), ai-dive (0.0.1) +8 more potentially affected by CVE-2026-4372 via transformers (4.30.1)

transformers PYPI version 4.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agixt =1.3.84, =1.15.3, =1.16.3, =0.0.1, =1.18.0rc1, =0.2.22, =0.2.32 Source cves: CVE-2026-4372 Source advisory: OSV:GHSA-29PF-2H5F-8G...

agixt (>=1.3.84, <=1.3.106), ai-dive (0.0.1) +8 more potentially affected by CVE-2026-4372 via transformers (4.30.1)

transformers PYPI version 4.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agixt =1.3.84, =1.15.3, =1.16.3, =0.0.1, =1.18.0rc1, =0.2.22, =0.2.32 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-2289...

agixt (>=1.3.84, <=1.3.106), ai-dive (0.0.1) +8 more potentially affected by CVE-2026-1839 via transformers (4.30.1)

transformers PYPI version 4.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agixt =1.3.84, =1.15.3, =1.16.3, =0.0.1, =1.18.0rc1, =0.2.22, =0.2.32 Source cves: CVE-2026-1839 Source advisory: OSV:GHSA-69W3-R845-38...

agixt (>=1.3.84, <=1.3.106), ai-dive (0.0.1) +8 more potentially affected by CVE-2026-1839 via transformers (4.30.1)

transformers PYPI version 4.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agixt =1.3.84, =1.15.3, =1.16.3, =0.0.1, =1.18.0rc1, =0.2.22, =0.2.32 Source cves: CVE-2026-1839 Source advisory: OSV:PYSEC-2026-2288...

CVE-2026-23523

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitrary local command execution on the...

CVE-2026-23523

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitrary local command execution on the...

CVE-2026-23523 Dive allows One-click Remote Code Execution through Deep Links for MCP Install

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitrary local command execution on the...

EUVD-2026-3125

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitrary local command execution on the...

CVE-2026-23523

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitrary local command execution on the...

CVE-2026-23523

Dive (MCP Host Desktop Application) prior to version 0.13.0 is affected. A crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation, leading to arbitrary local command execution on the victim’s machine. This vulnerability is fixed in 0.13.0...

CVE-2026-23523: Improper Control of Generation of Code

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitrary local command execution on the...

CVE-2025-66580

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stored Cross-Site Scripting XSS vulnerability exists in versions prior to 0.11.1 in the Mermaid diagram rendering component. The application allows the execution of arbitrary...

CVE-2025-66580 Dive has Cross-Site Scripting vulnerability that can escalate to Remote Code Execution

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stored Cross-Site Scripting XSS vulnerability exists in versions prior to 0.11.1 in the Mermaid diagram rendering component. The application allows the execution of arbitrary...

EUVD-2025-204564

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stored Cross-Site Scripting XSS vulnerability exists in versions prior to 0.11.1 in the Mermaid diagram rendering component. The application allows the execution of arbitrary...