What’s Vulnerable › Products

aaif-goose goose vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your aaif-goose goose version is affected

Latest aaif-goose goose vulnerabilities

• CVE-2026-109561 — goose from 1.28.0 before 1.44.0 Manual Approval Bypass via Read-Only Tool Annotations (CVSS 4.2)
• CVE-2026-85623 — goose 1.37.0 Arbitrary Command Execution via Recipe Extensions (CVSS 8.8)
• CVE-2026-72718 — goose: Arbitrary command execution in goose CLI via `goose review` via git core.fsmonitor (CVSS 7.0)