Approved changes feed: RSS · Atom

cpe:2.3:a:deepseek-ai:deepseek-harness:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDeepseek Ai (1712fe18-c411-5ea4-86c6-deb7eb91d017)
ProductDeepseek Harness (df9bc46d-4b38-52f6-bd11-0207bdc2ed79)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-108788 vulnerable 2026-11-03 10:18:01.142536 deepseek-ai deepseek-harness Sandbox spawn sandbox
MEDIUM (5.3)
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-10-12T02:00:56.424Z
Updated: 2026-10-14T17:17:08.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-108789 vulnerable 2026-11-03 10:18:00.797875 deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow
MEDIUM (5.5)
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-10-12T02:15:31.636Z
Updated: 2026-10-13T14:22:56.082Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.