Homebrew

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Homebrew records in CISA KEV

No Homebrew vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jan 3 records HIGH

Records

3 records

TI-2024-24788 CVE-2024-37273 · GHSA-878h-rqcq-mv3x

An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan…

HIGH 82

An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00989 Published 2024-06-04 No fix listed CWE-94

TI-2024-24429 CVE-2024-36858 · GHSA-qfjh-mvq6-c5p8

An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan…

HIGH 82

An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03035 Published 2024-06-04 No fix listed CWE-434

TI-2024-24428 CVE-2024-36857 · GHSA-5jqc-qj57-4hrc

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.

HIGH 72

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02054 Published 2024-06-04 No fix listed CWE-31

Open these records in search →

Critical	2
High	1
Medium	0
Low	0
No CVSS	0