codewhale-tui

Rust / Cargo · Package

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repositoryCVE-2026-75911 · GHSA-GX45-XRJ5-G6C4	codewhale-tui deepseek-tui	Rust / Cargonpm	High	Fix reported	2026-09-04
CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without ApprovalCVE-2026-75912 · GHSA-C6MW-8XH8-GPQ6	codewhale-tui deepseek-tui	Rust / Cargonpm	High	Fix reported	2026-09-04
CodeWhale: SSRF‌ bypass - TOCTOU on DNS failure for DNS pinningCVE-2026-75856 · GHSA-6V2G-FPXH-PMMH	codewhale-tui deepseek-tui	Rust / Cargonpm	Critical	Fix reported	2026-09-04
CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)CVE-2026-75858 · GHSA-WRJ3-VJ8C-784F	codewhale-tui deepseek-tui	Rust / Cargonpm	High	Fix reported	2026-09-04
CodeWhale: js_execution leaks parent environment to model context via missing env scrubCVE-2026-75915 · GHSA-H539-C7R8-3XQ4	codewhale-tui deepseek-tui	Rust / Cargonpm	High	Fix reported	2026-09-04
CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without ApprovalCVE-2026-75913 · GHSA-7J5W-7R7X-9V27	codewhale-tui deepseek-tui	Rust / Cargonpm	High	Fix reported	2026-09-04
CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)CVE-2026-75857 · GHSA-G29H-PFMP-QP9R	codewhale-tui deepseek-tui	Rust / Cargonpm	High	Fix reported	2026-09-04
CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repositoryCVE-2026-75859 · GHSA-62F5-CP2P-VQ95	codewhale-tui deepseek-tui	Rust / Cargonpm	High	Fix reported	2026-09-04
CodeWhale: image_analyze follows workspace symlinks, leaking external file bytesCVE-2026-75914 · GHSA-W7WX-5Q49-R59W	codewhale-tui deepseek-tui	Rust / Cargonpm	High	Fix reported	2026-09-04