xiaobei vulnerabilities

CVEs whose affected-version data names the xiaobei package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85667Critical· 9.1PoC

2w ago

xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attackers to inject arbitrary messages into the agent pipeline

xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attackers to inject arbitrary messages into the agent pipeline. Attackers can publish malicious messages via t…

▾ AbyssalTeamWiseFlow · xiaobeiEPSS 0.38%via NVD