Vulnerabilities

Summary — last 7 days

New vulnerabilities4,979▲ 187 vs. last week
Critical / high1,821▼ 927 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)1,070▲ 1,007 vs. last week
More filters
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
Awaiting AnalysisCritical (9.1)——Google ADK TypescriptAI10/20/202610/20/2026
Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files (when an agent tool invokes saveArtifact) outside the intended artifact storage root via crafted…