Known vulnerabilities in Windsurf

Vendor: Cognition
Software: Windsurf
Software CPE: cpe:2.3:a:cognition:windsurf:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 1
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windsurf Windsurf is affected by 1 known vulnerabilities: 1 low Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117619 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-36730		 CWE-74 Low
Available
No
 - 23.10.2025 SB2025102394