@stackflag.bsky.socialCVE-2026-92702 - cocos
Versions of Cocos AI up to 0.8.2 may accept a proof that a protected hardware environment is in place even when that proof is old or unrelated, if no specific data is supplied.…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-92701 - cocos
Versions of Cocos up to 0.8.2 can be tricked into accepting a proof of trust that does not match the current connection, letting an attacker link the session to the wrong user.…
Too many irrelevant or confusing CVEs? Use stackflag.com