cve-research
Warn
Audited by Snyk on Sep 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The workflow queries public vulnerability databases and advisory APIs (such as CVE.org, NVD, OSV, and CISA) for specific CVE IDs provided by the user, which falls under actively fetching external references and search results.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata