Skip to content
OpenAdvisories

Package · Go

github.com/tursodatabase/turso-cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-48790

    turso-cli persists Turso platform JWT with world-readable (0o644) file permissions

    Turso CLI is the command line interface (CLI) to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to `settings.json` using Viper's default `configPermissions` of `0o644`, leaving the credential file world-readable…

    tursodatabase turso-cli github.com/tursodatabase/turso-cli Go