Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: scottchiefbaker Clear all filters
TI-2026-40840 CVE-2026-56651 · GHSA-q9x7-4mx4-prwq

Arbitrary File Overwrite via Symlink Following in dool project

Priority LOW 10

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "O_NOFOLLOW" flag.

CVSS 4.0LOW 2.0 Local No auth User interaction EPSS 0.00187 Published 2026-08-27 No fix listed CWE-59
TI-2026-40841 CVE-2026-56652 · GHSA-w3j2-f8wq-g63j

Formula Injection in dool project

Priority LOW 20

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @.

CVSS 4.0MEDIUM 4.6 Local No auth User interaction EPSS 0.00191 Published 2026-08-27 No fix listed CWE-1236