Vulnerabilities in Hmbown

4 results

CVE-2026-45311CRITICALCodeWhale: run_tests Tool Enables RCE via Malicious Repository Without ApprovalEPSS 0.4%CVE-2026-45374CRITICALCodeWhale: task_create Insecure Defaults Enable RCE via Prompt Injection in Project FilesEPSS 0.3%CVE-2026-45373HIGHCodeWhale: SSRF‌ IPV6 bypassEPSS 0.2%CVE-2026-45310HIGHCodeWhale: SSRF via HTTP Redirect Bypass in fetch_url ToolEPSS 0.2%