C
Vendor security profile
cosmicstack-labs
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical0
CISA KEV0
Public exploit8
Patch rate%0
Avg. CVSS5.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
3
5
0
CVE KEV
CVE severity distribution
8toplam CVE
Medium8 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%100
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
8Unknown
Latest vulnerabilities
5.3
CVE-2026-90814
cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery
C
Patch status unknownEPSS %0
5.3
CVE-2026-90813
cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize
C
Patch status unknownEPSS %1
5.3
CVE-2026-90812
cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment
C
Patch status unknownEPSS %0
4.8
CVE-2026-90811
cosmicstack-labs mercury-agent Shell Permission Manifest permissions.ts PermissionManager.checkShellCommand information disclosure
C
Patch status unknownEPSS %0
5.3
CVE-2026-90810
cosmicstack-labs mercury-agent Shell Command Permission Check permissions.ts PermissionManager.checkShellCommand improper authorization
C
Patch status unknownEPSS %0
5.3
CVE-2026-18998
cosmicstack-labs mercury-agent delegate_task Tool sub-agent.ts SubAgent.run improper authorization
C
Patch status unknownEPSS %0
5.3
CVE-2026-18997
cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization
C
Patch status unknownEPSS %0
5.3
CVE-2026-18996
cosmicstack-labs mercury-agent run_command permissions.ts PermissionManager.checkShellCommand privileges assignment
C
Patch status unknownEPSS %0