Approved changes feed: RSS · Atom
cpe:2.3:a:lintsinghua:deepaudit:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Lintsinghua (f37dc0a9-3cab-507e-8752-1a5ab0de77c8) |
|---|---|
| Product | Deepaudit (b8eeaf4c-68de-5f27-a4c0-079cf909e3e1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/lintsinghua/deepaudit |
purl2cpe | 2026-07-28 16:41:17.163265 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-2532 |
vulnerable | 2026-06-08 07:55:17.181905 |
lintsinghua DeepAudit IP Address embedding_config.py server-side request forgery
MEDIUM (6.3)
A vulnerability was detected in lintsinghua DeepAudit up to 3.0.3. This issue affects some unknown processing of the file backend/app/api/v1/endpoints/embedding_config.py of the component IP Address Handler. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. Upgrading to version 3.0.4 and 3.1.0 is capable of addressing this issue. The patch is named da853fdd8cbe9d42053b45d83f25708ba29b8b27. It is suggested to upgrade the affected component.
Published: 2026-02-16T03:02:09.038Z
Updated: 2026-02-23T10:04:56.694Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25729 |
vulnerable | 2026-06-08 07:53:20.271573 |
DeepAudit Affected by User Enumeration via Broken Access Control
DeepAudit is a multi-agent system for code vulnerability discovery. In 3.0.4 and earlier, there is an improper access control vulnerability in the /api/v1/users/ endpoint allows any authenticated user to enumerate all users in the system and retrieve sensitive information including email addresses, phone numbers, full names, and role information.
Published: 2026-02-06T20:30:17.112Z
Updated: 2026-02-06T20:50:17.216Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.