Vulnerabilities

TI-2026-40336 CVE-2026-55883 · GHSA-6m68-r693-78qx

Tilt: Cross-site WebSocket hijacking of the Tilt HUD stream

LOW 36

Tilt defines dev environments as code for microservice apps on Kubernetes.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00262 Published 2026-07-10 Fixed in 0.37.4 CWE-345

TI-2026-40335 CVE-2026-55882 · GHSA-p749-9w62-w533

LOW 37

Tilt defines dev environments as code for microservice apps on Kubernetes.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00524 Published 2026-07-10 Fixed in 0.37.4 CWE-200

TI-2026-40337 CVE-2026-55884 · GHSA-c73q-8xxr-rgqm

MEDIUM 48

Tilt defines dev environments as code for microservice apps on Kubernetes.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00496 Published 2026-07-10 Fixed in 0.37.4 CWE-306