Vulnerabilities in Hmbown
13 resultsCVE-2026-75915HIGHCodeWhale before 0.8.64 Environment Variable Leak via js_executionEPSS 0.7%CVE-2026-45311CRITICALCodeWhale: run_tests Tool Enables RCE via Malicious Repository Without ApprovalEPSS 0.6%CVE-2026-75859HIGHCodeWhale before 0.8.64 Arbitrary File Read via instructionsEPSS 0.5%CVE-2026-75914HIGHCodeWhale before 0.8.64 Path Traversal via image_analyze symlinkEPSS 0.5%CVE-2026-75856CRITICALCodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOUEPSS 0.5%CVE-2026-75913HIGHCodeWhale before 0.8.64 Argument Injection via git_showEPSS 0.5%CVE-2026-75912HIGHCodeWhale before 0.8.64 Argument Injection via git_blameEPSS 0.4%CVE-2026-45374CRITICALCodeWhale: task_create Insecure Defaults Enable RCE via Prompt Injection in Project FilesEPSS 0.4%CVE-2026-75858HIGHCodeWhale rlm_eval before 0.8.64 Remote Code ExecutionEPSS 0.4%CVE-2026-45373HIGHCodeWhale: SSRF IPV6 bypassEPSS 0.3%CVE-2026-45310HIGHCodeWhale: SSRF via HTTP Redirect Bypass in fetch_url ToolEPSS 0.3%CVE-2026-75911HIGHCodeWhale before 0.8.64 Remote Code Execution via allow_shellEPSS 0.2%CVE-2026-75857HIGHCodeWhale before 0.8.64 Privilege Escalation via exec_shell_interactEPSS 0.2%