Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-30351 1 Leonvanzyl 1 Autocoder 2026-04-28 7.5 High
A path traversal vulnerability in the UI/static component of leonvanzyl autocoder commit 79d02a allows attackers to read arbitrary files via sending crafted URL path containing traversal sequences.
CVE-2026-30352 1 Leonvanzyl 1 Autocoder 2026-04-28 9.8 Critical
A remote code execution (RCE) vulnerability in the /devserver/start endpoint of leonvanzyl autocoder commit 79d02a allows attackers to execute arbitrary code via providing a crafted command parameter.