Vulnerabilities

Summary — last 7 days

New vulnerabilities3,526▼ 1,286 vs. last week
Critical / high1,364▼ 1,397 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)710▲ 647 vs. last week
More filters
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
Awaiting AnalysisCritical (9.1)——Google ADK TypescriptAI10/20/202610/20/2026
Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files (when an agent tool invokes saveArtifact) outside the intended artifact storage root via crafted…