Jdx vulnerabilities
We track 4 vulnerabilities in Jdx products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
Latest Jdx vulnerabilities
- 7.8 High severity
mise: Improper Neutralization of Special Elements used in an OS Command
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml [settings] from an untrusted local project before trust approval and strip_local_only_settings removes only fields marked gl
- 8.6 High severity
mise: Improper Neutralization of Special Elements used in an OS Command
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feature gates config files (mise.toml, .tool-versions) through trust_check, but task-include files are loaded on a path that never reaches it. When a directory has
- 9.6 Critical severity
mise: Improper Control of Generation of Code
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files through the Tera template engine during parsing, with the exec() function registered, enabling arbitrary command execution. Unlike .mise.tom
- 7.8 High severity
mise: Improper Access Control
mise manages dev tools like node, python, cmake, and terraform. From 2026.2.18 through 2026.4.5, mise loads trust-control settings from a local project .mise.toml before the trust check runs. An attacker who can place a malicious .mise.toml in a repository can