MI
Product
mise
7
CVEs
0
On KEV
9.6
Max CVSS
1
New 30D
Severity mix
Critical 1High 3Medium 3Low 0
Watch
Add mise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33646 | 9.6 | Jun 26 | mise: Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass) Affected: < 2026.3.10 |
| CVE-2026-55441 | 8.6 | Jun 26 | mise: Arbitrary command execution via task-include files in an untrusted, config-less repository Affected: < 2026.6.4 |
| CVE-2026-103929 | 7.8 | Oct 14 | mise permits untrusted local configuration to override default shell arguments Affected: < 2026.7.14 |
| CVE-2026-35533 | 7.8 | Apr 7 | mise has a local settings bypass config trust checks Affected: >= 2026.2.18, <= 2026.4.5 |
| CVE-2026-71477 | 6.7 | Aug 18 | mise: Incorrect file ownership, when installed by the root user using `install.sh` Affected: < 2026.7.1 |
| CVE-2026-55448 | 6.3 | Jun 26 | mise: Local credential_command executes untrusted config Affected: < 2026.6.4 |
| CVE-2026-54557 | 5.5 | Jun 26 | mise HTTP backend uses raw version path for install symlink destination Affected: < 2026.6.1 |
Showing 7