Skip to content
OpenAdvisories

Vendor

tursodatabase

2 known vulnerabilities.

Products

turso 1 turso-cli 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-85698

    Turso through 0.8.0-pre.8 Out-of-Bounds Read Denial of Service

    Turso through 0.8.0-pre.8 contains an out-of-bounds read vulnerability in the table-leaf page reader that uses an attacker-controlled cell-count field without bounds validation. Attackers can craft a malicious database file with a modified cell count value to…

    tursodatabase turso
  • Medium 5.5
    CVE-2026-48790

    turso-cli persists Turso platform JWT with world-readable (0o644) file permissions

    Turso CLI is the command line interface (CLI) to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to `settings.json` using Viper's default `configPermissions` of `0o644`, leaving the credential file world-readable…

    tursodatabase turso-cli github.com/tursodatabase/turso-cli Go