CVE Intelligence

Vulnerabilidades do Agentverus Agentverus-scanner

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Agentverus Agentverus-scanner: 2 registro(s), com versões afetadas e correções.

CVE-2026-101079 Baixa · 2.8 CWE-20 28/09/2026
agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision
A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be initiated from a local position. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-84811 Média · 6.5 CWE-693 02/09/2026
agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode
agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious __pycache__ entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports a CERTIFIED verdict with high trust scores in both static and semantic analysis modes.