Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

ruvnet vulnerabilities

4 published CVEs name ruvnet among the affected products.

Newest CVEs

  • CVE-2026-55609

    sublinear-time-solver: Arbitrary file write in consciousness-explorer / sublinear-time-solver MCP export_state

    ruvnet · sublinear-time-solver

    High7.1
  • CVE-2026-58195

    Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync

    ruvnet · agentic-flow

    High8.8
  • CVE-2026-59726

    Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment

    ruvnet · ruflo

    Critical10.0
  • CVE-2026-7645

    ruvnet sublinear-time-solver MCP server.js export_state path traversal

    ruvnet · sublinear-time-solver

    Medium6.9