steipete/summarize Security Advisories | GitStock

medium2026-06-11

@steipete/summarize vulnerable to SSRF via podcast:transcript URL fetch

GHSA-3vx2-vqx8-jxfg · CVE-2026-53782

medium2026-06-11

@steipete/summarize is Vulnerable to Disk Exhaustion via Crafted Media Responses

GHSA-q9xm-f36c-xm3q · CVE-2026-53781

low2026-05-18

Summarize contains a missing authorization vulnerability

GHSA-67gq-6q8c-qqh6 · CVE-2026-45244

medium2026-05-18

Summarize's hover summary feature allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links

GHSA-2r69-qgv3-hr65 · CVE-2026-45245

high2026-05-18

Summarize contains a path traversal vulnerability

GHSA-8jr4-6r33-phwm · CVE-2026-45242

medium2026-05-18

Summarize contains a missing authorization vulnerability

GHSA-5624-2pmv-jx46 · CVE-2026-45243

medium2026-05-11

@steipete/summarize allows local attackers to read bearer tokens and API credentials stored in ~/.summarize/daemon.json

GHSA-qp7v-gjgg-4mj6 · CVE-2026-45222