Skip to main content
cve.nowby Sazabi
Menu
PyPI

Package

code-graph-rag

2 known CVEs (2 high), with the versions each affects and the releases that fix them.

PyPI

Latest release
0.6.30 (Nov 9, 2026): no advisory affects it
Newest unaffected release
0.6.30 (Nov 9, 2026), the latest release
Advisories
2 · 2 high
Weekly downloads
835
Releases
40 since 0.0.79 (Feb 21, 2026)
Registry
PyPI
Releases read
Nov 11, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 2

  • Code Graph RAG structural tools follow out-of-root symlinks

    Affected: fixed in 0.0.587.

    Fixed in 0.0.589 (released Aug 10, 2026, 87 days before disclosure, the advisory names 0.0.587, which was never published).

    The latest release, 0.6.30, is not affected.

  • Code Graph RAG: MCP paginated read_file path traversal / arbitrary file read

    Affected: fixed in 0.0.345.

    Fixed in 0.0.345 (released Jul 14, 2026, 114 days before disclosure).

    The latest release, 0.6.30, is not affected.