Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: steipete CodexBar 0.32.0 Clear all filters
TI-2026-36350 CVE-2026-49135 · GHSA-8v4r-w49g-jc9w

CodexBar < 0.32.0 Insecure Temporary File Handling in Notarization Workflow

Priority HIGH 67

CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build artifacts by exploiting predictable file paths in the r…

CVSS 4.0HIGH 7.2 Local Low privileges No interaction EPSS 0.00129 Published 2026-06-01 Fixed in 0.32.0 CWE-377
TI-2026-36349 CVE-2026-49134 · GHSA-gg57-wg6f-c8vg

CodexBar < 0.32.0 Privilege Escalation via CLI Installer Temp File

Priority HIGH 68

CodexBar prior to 0.32.0 contains a privilege escalation vulnerability in the CLI installer that allows local attackers to execute arbitrary commands as root by exploiting a race condition in temporary file handling.

CVSS 4.0HIGH 7.5 Network Low privileges User interaction EPSS 0.0027 Published 2026-06-01 Fixed in 0.32.0 CWE-377
TI-2026-31730 CVE-2026-43625 · GHSA-x92v-hcjq-jcx7

CodexBar < 0.32.0 Session Cookie Exposure via HTTP Redirect

Priority LOW 35

CodexBar prior to 0.32.0 contains a session cookie leakage vulnerability that allows network attackers to intercept imported browser session cookies by exploiting improper redirect handling for Amp and Ollama provider se…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00186 Published 2026-06-01 Fixed in 0.32.0 CWE-319