jdx mise vulnerabilities

Newest CVEs

• CVE-2026-103929

  mise permits untrusted local configuration to override default shell arguments

  jdx · mise

  High7.8
• CVE-2026-71477

  mise: Incorrect file ownership, when installed by the root user using `install.sh`

  jdx · mise

  Medium6.7
• CVE-2026-33646

  mise: Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)

  jdx · mise

  Critical9.6
• CVE-2026-55441

  mise: Arbitrary command execution via task-include files in an untrusted, config-less repository

  jdx · mise

  High8.6
• CVE-2026-54557

  mise HTTP backend uses raw version path for install symlink destination

  jdx · mise

  Medium5.5
• CVE-2026-55448

  mise: Local credential_command executes untrusted config

  jdx · mise

  Medium6.3
• CVE-2026-35533

  mise has a local settings bypass config trust checks

  jdx · mise

  High7.8