Vulnerabilities > Homebrew

DATE CVE VULNERABILITY TITLE RISK
2024-06-04 CVE-2024-36857 Unspecified vulnerability in Homebrew JAN 0.4.12
Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.
network
low complexity
homebrew
7.5
2024-06-04 CVE-2024-36858 Unrestricted Upload of File with Dangerous Type vulnerability in Homebrew JAN 0.4.12
An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.
network
low complexity
homebrew CWE-434
critical
9.8
2024-06-04 CVE-2024-37273 Unrestricted Upload of File with Dangerous Type vulnerability in Homebrew JAN 0.4.12
An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.
network
low complexity
homebrew CWE-434
critical
9.8