Vulnerability index

Browse CVEs

10 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Sim CRITICAL 9.8
CVE-2026-3431

On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller without authentication or hos…

Fix: 0.5.74+
Fix from $2,300 2026-03-02
Sim CRITICAL 9.1
CVE-2026-3432

On SimStudio version below to 0.5.74, the `/api/auth/oauth/token` endpoint contains a code path that bypasses all authorization checks when provided …

Fix: 0.5.74+
Fix from $2,300 2026-03-02
Sim CRITICAL 9.8
CVE-2025-15099

A vulnerability was identified in simstudioai sim up to 0.5.27. This vulnerability affects unknown code of the file apps/sim/lib/auth/internal.ts of …

Fix: after 0.5.27
Fix from $2,300 2025-12-26
Sim CRITICAL 9.8
CVE-2025-10097

A vulnerability was identified in SimStudioAI sim up to 1.0.0. This impacts an unknown function of the file apps/sim/app/api/function/execute/route.t…

Mitigation only
Fix from $2,300 2025-09-08
Sim MEDIUM 6.5
CVE-2025-10096

A vulnerability was determined in SimStudioAI sim up to 1.0.0. This affects an unknown function of the file apps/sim/app/api/files/parse/route.ts. Ex…

Fix: 0.3.40+
Fix from $1,600 2025-09-08
Sim HIGH 7.5
CVE-2025-9805

A vulnerability was found in SimStudioAI sim up to 51b1e97fa22c48d144aef75f8ca31a74ad2cfed2. This issue affects some unknown processing of the file a…

Fix: 0.3.40+
Fix from $1,950 2025-09-02
Sim HIGH 8.1
CVE-2025-9801

A security vulnerability has been detected in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. This affects an unknown part. The manip…

Fix: 0.3.40+
Fix from $1,950 2025-09-01
Sim MEDIUM 6.1
CVE-2025-9800

A weakness has been identified in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. Affected by this issue is the function Import of th…

Fix: after 0.3.40
Fix from $1,600 2025-09-01
Sim HIGH 7.5
CVE-2025-7114

A vulnerability was found in SimStudioAI sim up to 37786d371e17d35e0764e1b5cd519d873d90d97b. It has been declared as critical. Affected by this vulne…

Fix: after 0.2.1
Fix from $1,950 2025-07-07
Sim HIGH 7.5
CVE-2025-7107

A vulnerability classified as critical has been found in SimStudioAI sim up to 0.1.17. Affected is the function handleLocalFile of the file apps/sim/…

Fix: after 0.1.17
Fix from $1,950 2025-07-07