TaskingAI vulnerabilities

CVEs whose affected-version data names the TaskingAI package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111321Medium· 5.4

yesterday

TaskingAI through 0.3.0 SSRF via OpenAPI servers[0].url in Actions

TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action…

▾ SunlitTaskingAI · TaskingAIvia CVEORG