jdx

Products

ProductCVEsExploitedLatest
mise7–Oct 14, 2026

Exploited and recent CVEs

  • CVE-2026-103929 High 7.8 mise permits untrusted local configuration to override default shell arguments 0.3%
  • CVE-2026-71477 Medium 6.7 mise: Incorrect file ownership, when installed by the root user using `install.sh` 0.1%
  • CVE-2026-33646 Critical 9.6 mise: Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass) 0.5%
  • CVE-2026-55441 High 8.6 mise: Arbitrary command execution via task-include files in an untrusted, config-less repository 0.2%
  • CVE-2026-54557 Medium 5.5 mise HTTP backend uses raw version path for install symlink destination 0.2%
  • CVE-2026-55448 Medium 6.3 mise: Local credential_command executes untrusted config 0.2%
  • CVE-2026-35533 High 7.8 mise has a local settings bypass config trust checks 0.2%