Zhayujie vulnerabilities

Products

• Cowagent 13
• Chatgpt-on-wechat Cowagent 5

Newest

• zhayujie cowagent zhayujie CowAgent Markdown Rendering Markdown.tsx denial of service CVE-2026-108769 5.3 MediumOctober 11, 2026
• zhayujie cowagent zhayujie CowAgent Streaming Tool-Call Argument json.loads allocation of resources CVE-2026-108768 5.3 MediumOctober 11, 2026
• zhayujie cowagent zhayujie CowAgent Media Download memory allocation CVE-2026-108683 5.3 MediumOctober 11, 2026
• zhayujie cowagent zhayujie CowAgent Web Console upload read denial of service CVE-2026-108682 5.3 MediumOctober 11, 2026
• zhayujie cowagent zhayujie CowAgent Web Console web_channel.py denial of service CVE-2026-108681 5.3 MediumOctober 11, 2026
• zhayujie cowagent zhayujie CowAgent Bash Tool bash.py denial of service CVE-2026-84427 5.3 MediumSeptember 2, 2026
• zhayujie cowagent zhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of service CVE-2026-84425 5.3 MediumSeptember 2, 2026
• zhayujie cowagent zhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorization CVE-2026-18992 5.3 MediumAugust 6, 2026
• zhayujie cowagent zhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgery CVE-2026-16194 5.3 MediumJuly 18, 2026
• zhayujie chatgpt-on-wechat cowagent zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgery CVE-2026-15628 5.3 MediumJuly 14, 2026
• zhayujie cowagent zhayujie CowAgent Message Endpoint channel.py authorization CVE-2026-15332 5.3 MediumJuly 10, 2026
• zhayujie cowagent zhayujie CowAgent Skill Installation service.py _add_package path traversal CVE-2026-15331 5.3 MediumJuly 10, 2026
• zhayujie cowagent zhayujie CowAgent Vision Tool vision.py _download_to_data_url server-side request forgery CVE-2026-15330 6.9 MediumJuly 10, 2026
• zhayujie cowagent zhayujie CowAgent Browser Tool browser_tool.py BrowserTool._do_navigate information disclosure CVE-2026-15329 5.3 MediumJuly 10, 2026
• zhayujie chatgpt-on-wechat cowagent zhayujie chatgpt-on-wechat CowAgent wx Endpoint common.py verify_server missing authentication CVE-2026-14714 6.9 MediumJuly 5, 2026
• zhayujie chatgpt-on-wechat zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injection CVE-2026-10214 6.9 MediumJune 1, 2026
• zhayujie chatgpt-on-wechat cowagent zhayujie chatgpt-on-wechat CowAgent Agent Mode Service missing authentication CVE-2026-6129 6.9 MediumApril 12, 2026
• zhayujie chatgpt-on-wechat cowagent zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication CVE-2026-6126 6.9 MediumApril 12, 2026
• zhayujie chatgpt-on-wechat cowagent zhayujie chatgpt-on-wechat CowAgent API Memory Content Endpoint service.py dispatch path traversal CVE-2026-5998 6.9 MediumApril 10, 2026