Hmbown CodeWhale vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Latest Hmbown CodeWhale vulnerabilities

CVE-2026-75915 — CodeWhale before 0.8.64 Environment Variable Leak via js_execution (CVSS 7.5)
CVE-2026-75914 — CodeWhale before 0.8.64 Path Traversal via image_analyze symlink (CVSS 7.5)
CVE-2026-75912 — CodeWhale before 0.8.64 Argument Injection via git_blame (CVSS 7.4)
CVE-2026-75911 — CodeWhale before 0.8.64 Remote Code Execution via allow_shell (CVSS 7.8)
CVE-2026-75859 — CodeWhale before 0.8.64 Arbitrary File Read via instructions (CVSS 7.5)
CVE-2026-75858 — CodeWhale rlm_eval before 0.8.64 Remote Code Execution (CVSS 7.8)
CVE-2026-75856 — CodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOU (CVSS 8.6)
CVE-2026-75913 — CodeWhale before 0.8.64 Argument Injection via git_show (CVSS 9.3)
CVE-2026-75857 — CodeWhale before 0.8.64 Privilege Escalation via exec_shell_interact (CVSS 7.0)
CVE-2026-45374 — CodeWhale: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files (CVSS 9.6)
CVE-2026-45373 — CodeWhale: SSRF‌ IPV6 bypass (CVSS 7.4)
CVE-2026-45311 — CodeWhale: run_tests Tool Enables RCE via Malicious Repository Without Approval (CVSS 9.6)
CVE-2026-45310 — CodeWhale: SSRF via HTTP Redirect Bypass in fetch_url Tool (CVSS 7.4)