MEDIUMnpm
GHSA-cvhv-6xm6-c3v4· CVE-2026-1721Cloudflare Agents is Vulnerable to Reflected Cross-Site Scripting in the AI Playground's OAuth callback handler
Modified: 2/13/2026
package
npm/agents
pkg:npm/agents
MEDIUMnpm
GHSA-r7x9-8ph7-w8cg· CVE-2026-1664Cloudflare Agents SDK has Insecure Direct Object Reference (IDOR) via Header-Based Email Routing
Modified: 2/22/2026
MEDIUMnpm
GHSA-w5cr-2qhr-jqc5Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site
Modified: 2/13/2026