Known Vulnerabilities for Kde-workspace by Kde
Listed below are 4 of the newest known vulnerabilities associated with "Kde-workspace" by "Kde".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-88940 json | knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers ... | Not Provided | 2026-09-10 | 2026-09-10 |
| CVE-2026-88898 json | AppFlowy-Cloud versions 0.7.2 through 0.9.64 fail to authorize callers against the workspace in the bulk publish endpoint pat... | Not Provided | 2026-09-10 | 2026-09-10 |
| CVE-2026-88055 json | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. I... | Not Provided | 2026-09-10 | 2026-09-10 |
| CVE-2026-87913 json | A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attac... | Not Provided | 2026-09-10 | 2026-09-10 |
| CVE-2026-87912 json | A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 m... | Not Provided | 2026-09-10 | 2026-09-10 |
| CVE-2026-87815 json | SiYuan versions before v3.8.2 contain a path traversal vulnerability in the /api/riff/removeRiffDeck endpoint that fails to v... | Not Provided | 2026-09-09 | 2026-09-09 |
| CVE-2026-87814 json | SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in the search asset preview feature that fails to e... | Not Provided | 2026-09-09 | 2026-09-09 |
| CVE-2026-87808 json | SiYuan versions <= 3.8.1 contain an incomplete fix for CVE-2026-32767 (GHSA-j7wh-x834-p3r7). The prior fix (commit d5e2d0bc) ... | Not Provided | 2026-09-09 | 2026-09-09 |
| CVE-2026-86145 json | PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA... | Not Provided | 2026-09-05 | 2026-09-08 |
| CVE-2026-86124 json | AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and ... | Not Provided | 2026-09-05 | 2026-09-05 |