Known Vulnerabilities for Ai-helper by @apostrophecms
Listed below are 10 of the newest known vulnerabilities associated with "Ai-helper" by "@apostrophecms".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-124329 json | A vulnerability was found in FlowCI flow-core-x up to 1.23.49. The impacted element is the function FileHelper.unzip of the f... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-123094 json | Huginn before 2026.11.05 contains a stored cross-site scripting vulnerability in the service_label helper that marks unescape... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-122231 json | The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t... | Not Provided | 2026-11-07 | 2026-11-07 |
| CVE-2026-120309 json | Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vulnerability in getRouterParam and getRouterParams that le... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120307 json | The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's cont... | Not Provided | 2026-11-01 | 2026-11-02 |
| CVE-2026-119716 json | pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/_compiler.py that allows te... | Not Provided | 2026-10-30 | 2026-11-06 |
| CVE-2026-119113 json | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Sto... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-118682 json | KaringX ClashMi through 1.0.32.1801 disables TLS certificate validation by default in the HttpUtils helper, allowing attacker... | Not Provided | 2026-10-28 | 2026-11-02 |
| CVE-2026-116787 json | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a sof... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-116761 json | The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cmb43ex1_grp[0][txt] (wysiwyg field insid... | Not Provided | 2026-10-28 | 2026-10-29 |