Hmbown CodeWhale

• CVE-2026-75915 High 7.5 CodeWhale before 0.8.64 Environment Variable Leak via js_execution 0.7%
• CVE-2026-75914 High 7.5 CodeWhale before 0.8.64 Path Traversal via image_analyze symlink 0.5%
• CVE-2026-75913 Critical 9.3 CodeWhale before 0.8.64 Argument Injection via git_show 0.5%
• CVE-2026-75912 High 7.4 CodeWhale before 0.8.64 Argument Injection via git_blame 0.4%
• CVE-2026-75911 High 7.8 CodeWhale before 0.8.64 Remote Code Execution via allow_shell 0.2%
• CVE-2026-75859 High 7.5 CodeWhale before 0.8.64 Arbitrary File Read via instructions 0.5%
• CVE-2026-75858 High 7.8 CodeWhale rlm_eval before 0.8.64 Remote Code Execution 0.4%
• CVE-2026-75857 High 7.0 CodeWhale before 0.8.64 Privilege Escalation via exec_shell_interact 0.2%
• CVE-2026-75856 High 8.6 CodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOU 0.5%
• CVE-2026-45311 Critical 9.6 CodeWhale: run_tests Tool Enables RCE via Malicious Repository Without Approval 0.6%
• CVE-2026-45310 High 7.4 CodeWhale: SSRF via HTTP Redirect Bypass in fetch_url Tool 0.3%
• CVE-2026-45373 High 7.4 CodeWhale: SSRF‌ IPV6 bypass 0.3%
• CVE-2026-45374 Critical 9.6 CodeWhale: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files 0.4%