cosmicstack-labs has 5 CVEs on record. 5 were published in the last 90 days. The busiest recent month was September 2026 with 5. The median CVSS is 4.3 (medium). None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 4.3
- Publish → KEV
- —
- Last 90 days
- 5 prev 0
Worst active — by depth score
CVE-2026-90814Medium· 6.3A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.1347CVE-2026-90810Medium· 6.3A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.1347CVE-2026-90813Medium· 4.3A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.1336CVE-2026-90812Medium· 4.3A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.036CVE-2026-90811Low· 3.3A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.030
cosmicstack-labs vulnerabilities
CVEs affecting cosmicstack-labs, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2026-90814Medium· 6.3PoCA flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13
A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function githubRequest of the file src/utils/github.ts of the component GitHub API Handler. This manipulation of the argument pat…
CVE-2026-90813Medium· 4.3PoCA vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13
A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in inc…
CVE-2026-90812Medium· 4.3PoCA security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0
A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation…
CVE-2026-90810Medium· 6.3PoCA security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13
A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13. The impacted element is the function PermissionManager.checkShellCommand of the file mercury-agent/src/capabilities/permissions.ts of the component Shell…
CVE-2026-90811Low· 3.3PoCA weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0
A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0. This affects the function PermissionManager.checkShellCommand of the file mercury-agent/src/capabilities/permissions.ts of the component Shell Permission Manif…