Skip to content
OpenAdvisories

Vendor

jdx

7 known vulnerabilities.

Products

mise 7
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-33646

    mise: Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)

    mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files through the Tera template engine during parsing, with the exec() function registered, enabling arbitrary command execution. Unlike .mise.to…

    jdx mise mise crates.io