VYPR

agent-zero

by 3clyp50

CVEs (1)

  • CVE-2026-47119MedMay 27, 2026
    risk 0.33cvss 6.1epss 0.00

    Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript in the application origin by serving SVG files through the image_get API endpoint without Content-Security-Policy, X-Content-Type-Options, or…