CVE-2026-116367

A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacte...

CVE-2026-116367 DeepSeek Harness sandbox.ts createContext

A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacte...

CVE-2026-116367 DeepSeek Harness sandbox.ts createContext

A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacte...

EUVD-2026-109917

A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacte...

CVE-2026-116367

A vulnerability exists in DeepSeek Harness up to version 0.1.0-rc.5 . The flaw specifically affects the createContext function within the file packages/extensions/cordis-host-runner/src/sandbox.ts. Improper handling within this component can lead to a sandbox issue , which may be triggered via a ...

DeepSeek Harness permission and access control issue vulnerability

DeepSeek Harness versions 0.1.0-rc.5 and earlier contain a vulnerability related to permission escalation and access control. This issue stems from an operation within the createContext function in the file packages/extensions/cordis-host-runner/src/sandbox.ts, which leads to sandbox issues and m...

PT-2026-123403

A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacte...

PT-2026-69105

Name of the Vulnerable Software and Affected Versions Hono versions 3.8.0 through 4.12.33 Description The memo function from hono/jsx retains the result of a server-side render and reuses it for subsequent renders when props are equal. Because request-scoped values read inside the component are n...

Race Condition

Overview org.webjars.npm:hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Race Condition through server-side rendering context handling in createContext and useContext. An attacker can read another in-flight request’s provided value by causing a...

CVE-2025-43855: Uncaught Exception

tRPC allows users to build & consume fully typesafe APIs without schemas or code generation. In versions starting from 11.0.0 to before 11.1.1, an unhandled error is thrown when validating invalid connectionParams which crashes a tRPC WebSocket server. This allows any unauthenticated user to cras...