Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.0	EPSS 0.1%	CVE-2026-108723answer-me-with-html · Link Following Low2.0EPSS 0.1%2026-10-11CVE Database V5CVE-2026-108723 answer-me-with-html versions up to 0.5.0 have a link following vulnerability in the am CLI code block src embedding. The localPath() function does not resolve symbolic links, allowing attackers to include symlinks pointing outside the repository. This can cause external files to be embedded into generated HTML and disclosed when shared. The vulnerability has a low CVSS score and no known exploits in the wild. EPSS 0.1%Vulnerability QingYunA #ghsa-7v7j-pmcf-62v5	CVE Database V5	2026-10-11

Showing 1–1 of 1 result