Section
Vulnerabilities
CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.
10 matching records.
-
OpenHuman is an open-source agent harness available as a desktop application and Rust library.
OpenHuman is an open-source agent harness available as a desktop application and Rust library. From 0.53.15 before 0.57.5 on macOS, core_process.rs in the Tauri desktop process publishes the per-launch OPENHUMAN_CORE_TOKEN bearer…
-
OpenHuman is an open-source agent harness available as a desktop application and Rust library.
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.13, an attacker who can send messages to a configured external channel can cause the agent to create persistent…
-
OpenHuman is an open-source agent harness available as a desktop application and Rust library.
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13, a remote direct message received through a configured Yuanbao channel is converted into a generic channel…
-
OpenHuman is an open-source agent harness available as a desktop application and Rust library.
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13, OpenHuman places names, descriptions, titles, and parameter definitions returned by configured external MCP servers…
-
OpenHuman is an open-source agent harness available as a desktop application and Rust library.
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0 on macOS, the runtime injected into a supported remote account webview such as Google Meet allows page JavaScript to…
-
OpenHuman is an open-source agent harness available as a desktop application and Rust library.
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13, background synchronization for connected services such as email, Slack, and Notion stores raw external content and…
-
OpenHuman is an open-source agent harness available as a desktop application and Rust library.
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.44, its local /ws/dictation WebSocket endpoint lacks client authentication and browser-origin validation. An…
-
OpenHuman is an open-source agent harness available as a desktop application and Rust library.
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, the core server protects HTTP POST requests to /rpc with bearer middleware but exposes Socket.IO rpc:request and…
-
OpenHuman is an open-source agent harness available as a desktop application and Rust library.
OpenHuman is an open-source agent harness available as a desktop application and Rust library. In affected versions before 0.57.5, the approval gate uses the JSON-RPC bearer token as an approval session identifier. This exposes…
-
OpenHuman is an open-source agent harness available as a desktop application and Rust library.
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, the local server exposes the server-sent events endpoint at /events without bearer authentication, permits cross-origin…
Reuse this view
Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Tinyhumansai&limit=100. RSS for this section: feed.xml.