Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 84 available sources using the dropdown above.
OSV Homebrew πΊ is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| brew-whistle-cve-2026-55629 | Whistle vulnerable to path traversal | 2026-08-26T10:05:36Z | 2026-09-16T10:51:54Z |
| brew-whistle-cve-2024-55500 | Avenwu Whistle Cross-Site Request Forgery (CSRF) | 2026-08-13T17:52:09Z | 2026-09-16T10:51:54Z |
| brew-webpack-cve-2025-68458 | webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior | 2026-08-13T17:52:03Z | 2026-09-16T10:50:22Z |
| brew-webpack-cve-2025-68157 | webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects | 2026-08-13T17:52:03Z | 2026-09-16T10:50:22Z |
| brew-webpack-cve-2024-43788 | DOM Clobbering Gadget found in Webpack's AutoPublicPathRuntimeModule that leads to Cross-site Scripting (XSS) | 2026-08-13T17:52:03Z | 2026-09-16T10:50:22Z |
| brew-webpack-cve-2023-28154 | 2026-08-13T17:52:03Z | 2026-09-16T10:50:22Z | |
| brew-vercel-cve-2026-44479 | Vercel: Non-interactive mode includes CLI arguments in suggested command output | 2026-08-13T17:46:48Z | 2026-09-16T10:44:27Z |
| brew-uvicorn-cve-2026-7246 | 2026-08-13T17:46:24Z | 2026-09-16T10:41:43Z | |
| brew-uvicorn-cve-2021-33880 | Observable Timing Discrepancy in aaugustin websockets library | 2026-08-13T17:46:24Z | 2026-09-16T10:41:43Z |
| brew-uvicorn-cve-2020-7695 | HTTP response splitting in uvicorn | 2026-08-13T17:46:24Z | 2026-09-16T10:41:43Z |
| brew-uvicorn-cve-2020-7694 | Log injection in uvicorn | 2026-08-13T17:46:24Z | 2026-09-16T10:41:43Z |
| brew-uvicorn-cve-2018-1000518 | websockets is vulnerable to denial of service by memory exhaustion | 2026-08-13T17:46:24Z | 2026-09-16T10:41:43Z |
| brew-trash-cli-cve-2019-18874 | Double Free in psutil | 2026-08-13T17:44:53Z | 2026-09-16T10:40:45Z |
| brew-tach-cve-2026-78679 | GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251) | 2026-09-10T01:26:32Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-78678 | GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame() | 2026-09-04T10:11:45Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-78677 | GitPython: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination | 2026-09-04T10:11:45Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-78676 | GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE | 2026-09-04T10:11:45Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-78675 | GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes) | 2026-09-04T10:11:45Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-76222 | GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython | 2026-08-20T09:45:21Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-76221 | GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE) | 2026-08-20T09:45:21Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-76220 | GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution | 2026-08-20T09:45:21Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-76219 | GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite | 2026-08-20T09:45:21Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-76218 | GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks | 2026-08-20T09:45:21Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-76217 | GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout() | 2026-08-20T09:45:21Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-73625 | GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution | 2026-08-14T09:45:05Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-73624 | GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled) | 2026-08-14T09:45:05Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-73623 | GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks | 2026-08-14T09:45:05Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-73622 | GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573) | 2026-08-14T09:45:05Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-73621 | GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count | 2026-08-14T09:45:05Z | 2026-09-16T10:36:44Z |
| brew-tach-cve-2026-73620 | GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read | 2026-08-14T09:45:05Z | 2026-09-16T10:36:44Z |