brew vulnerabilities

1 known vulnerability in brew from Homebrew. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  brew: Inclusion of Web Functionality from an Untrusted Source

  CVE-2024-42381Jul 31, 2024Homebrew

  os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandbo