AdvisoriesToolsStatsChecklistSubmitGet the email
← All tools
IDEs & agents · janhq

Jan

Open-source desktop app for running local LLMs and AI agents with built-in file and tool access.

1Advisories
0critical
0high
1medium
2026-11-04Latest
Timeline · advisories per quarter
12026 Q4
Named in sources

Reported for Jan

01. mediumPrompt injectionCVE-2026-122235: Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools gate.rs that allows attackers to write files outside the workspacJan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools gate.rs that allows attackers to write files outside the workspace via dangling symlinks. Jan 2026-11-04
The weekly email

One email a week. Only what changed.

Every new security hole in AI coding tools, MCP servers, app builders and the stacks they generate (Next.js, Supabase, Node, PHP), each with how to check your app and the fix. No roundups of things you already read.

Free, one email a week. Read the latest issue first if you like. One-click unsubscribe in every email. We never sell or share addresses.