[ Vendor · 2 CVEs ]
knowns-dev
CVEs affecting knowns-dev published in the last 30 days, plus any knowns-dev CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-86540 | 7 Sep 2026 | CVSS 7.8 | knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.jsonknowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to execute… | Fix |
| CVE-2026-86439 | 7 Sep 2026 | CVSS 8.8 | Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Toolsknowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing attackers to read, create, overwrite and delete files… | Fix |