Known Vulnerabilities for Workspaces by Amazon
Listed below are 2 of the newest known vulnerabilities associated with "Workspaces" by "Amazon".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-47713 json | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. P... | Not Provided | 2026-05-28 | 2026-05-29 |
| CVE-2026-47107 json | Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where... | Not Provided | 2026-05-19 | 2026-05-19 |
| CVE-2026-44114 json | OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv f... | Not Provided | 2026-05-06 | 2026-05-07 |
| CVE-2026-42463 json | SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.8.0, SQLBot contains a Cross-W... | Not Provided | 2026-05-13 | 2026-05-14 |
| CVE-2026-41949 json | Dify before version 1.14.2 contains an authorization bypass vulnerability in the file preview endpoint that allows any authen... | Not Provided | 2026-05-18 | 2026-05-26 |
| CVE-2026-41649 json | Outline is a service that allows for collaborative documentation. The `shares.create` API endpoint starting in version 0.86.0... | Not Provided | 2026-04-28 | 2026-04-29 |
| CVE-2026-41336 json | OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, enabli... | Not Provided | 2026-04-23 | 2026-04-24 |
| CVE-2026-41277 json | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Mass Assignment vu... | Not Provided | 2026-04-23 | 2026-04-25 |
| CVE-2026-40102 json | Plane is an open-source project management tool. In versions 1.3.0 and below, SavedAnalyticEndpoint passes the user-controlle... | Not Provided | 2026-05-20 | 2026-05-21 |
| CVE-2026-39425 json | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vul... | Not Provided | 2026-04-14 | 2026-04-14 |