pipeshub-ai has 2 CVEs on record. 3 were published in the last 90 days. The busiest recent month was October 2026 with 3. The median CVSS is 6.4 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.4
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
pipeshub-ai vulnerabilities
CVEs affecting pipeshub-ai, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-119711Medium· 5.3PoCPipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Header
PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to o…
CVE-2026-119710High· 7.1PoCPipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule Route
PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting into the :connector path segment. Attackers can send a :connect…
CVE-2026-119712Medium· 6.4PoCPipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents
PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can …