mise
Rust / Cargo · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Mise's local credential_command executes untrusted config | mise | Rust / Cargo | Medium | Fix reported | |
| mise permits untrusted local configuration to override default shell arguments | mise | Rust / Cargo | High | Fix reported | |
| mise HTTP backend uses raw version path for install symlink destination | mise | Rust / Cargo | Medium | Fix reported | |
| Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass) | mise | Rust / Cargo | Critical | Fix reported | |
| Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository | mise | Rust / Cargo | High | Fix reported | |
| Local settings bypass config trust checks | mise | Rust / Cargo | High | Fix reported |