deepseek-harness vulnerabilities
CVEs whose affected-version data names the deepseek-harness package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
CVE-2026-108789Medium· 5.5PoCA vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is pos…
CVE-2026-108788Medium· 5.3A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possi…
CVE-2026-101132Low· 3.1PoCA security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2
A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected element is the function loadProfile of the file packages/boot/app-boot/src/profile.ts of the component Bundle Patch Handler. The manipulation…
CVE-2026-101131Low· 3.3A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the file packages/e2b/e2b/src/index.ts of the component dsh. The manipulation of the argument E2B_API_KEY leads to relian…
CVE-2026-101102Medium· 6.3A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7
A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor'…
CVE-2026-101078Medium· 6.3PoCA vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2
A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to imp…