Homebrew vulnerabilities
We track 2 vulnerabilities in Homebrew products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2024.
2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score
Latest Homebrew vulnerabilities
- 8.3 High severity
brew: Inclusion of Web Functionality from an Untrusted Source
os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandbo
- 9.8 Critical severity
jan: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.