CVE-2024-5820 — An unprotected WebSocket connection in the latest version of stitionai/devika (commit ecee79f) allows a malicious website to connect to the backend and issue commands on behalf of the user. The backen — CVE Database · The Intelligence Room