Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Hmbown — Vulnerabilities & Security Advisories 13

Browse all 13 CVE security advisories affecting Hmbown. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates security vulnerability data specifically for the vendor Hmbown, focusing on software weaknesses and associated risk tags. It collects a comprehensive set of reported security flaws, ranging from remote code execution to privilege escalation, covering the time period from the vendor's initial public releases to the most recent disclosed incidents. Readers can utilize this resource to track official vendor advisories, analyze the prevalence of specific weakness classes within Hmbown products, or review the complete historical vulnerability record for any specific software item in their portfolio. The data presented here serves as a factual reference for security professionals, auditors, and system administrators who need to assess the current security posture of Hmbown solutions without relying on fragmented external sources. By centralizing these reports, the page facilitates efficient risk management and helps organizations prioritize remediation efforts based on verified historical data. All entries are organized chronologically and by severity to support quick identification of critical issues affecting specific product lines. This collection aims to provide a clear, unbiased view of the security landscape surrounding Hmbown, enabling stakeholders to make informed decisions regarding patch deployment and system hardening strategies.

Found 13 results / 13 Clear Filters
Top products by Hmbown: CodeWhale
CVE ID Title CVSS Severity Published
CVE-2026-75915 CodeWhale before 0.8.64 Environment Variable Leak via js_execution — CodeWhale CWE-200 7.5 High 2026-08-18
CVE-2026-75913 CodeWhale before 0.8.64 Argument Injection via git_show — CodeWhale CWE-73 9.3 Critical 2026-08-18
CVE-2026-75914 CodeWhale before 0.8.64 Path Traversal via image_analyze symlink — CodeWhale CWE-22 7.5 High 2026-08-18
CVE-2026-75912 CodeWhale before 0.8.64 Argument Injection via git_blame — CodeWhale CWE-88 7.4 High 2026-08-18
CVE-2026-75911 CodeWhale before 0.8.64 Remote Code Execution via allow_shell — CodeWhale CWE-94 7.8 High 2026-08-18
CVE-2026-75859 CodeWhale before 0.8.64 Arbitrary File Read via instructions — CodeWhale CWE-22 7.5 High 2026-08-18
CVE-2026-75858 CodeWhale rlm_eval before 0.8.64 Remote Code Execution — CodeWhale CWE-94 7.8 High 2026-08-18
CVE-2026-75856 CodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOU — CodeWhale CWE-918 8.6 High 2026-08-18
CVE-2026-75857 CodeWhale before 0.8.64 Privilege Escalation via exec_shell_interact — CodeWhale CWE-269 7.0 High 2026-08-18
CVE-2026-45311 CodeWhale: run_tests Tool Enables RCE via Malicious Repository Without Approval — CodeWhale CWE-94 9.6 Critical 2026-05-28
CVE-2026-45310 CodeWhale: SSRF via HTTP Redirect Bypass in fetch_url Tool — CodeWhale CWE-918 7.4 High 2026-05-28
CVE-2026-45373 CodeWhale: SSRF‌ IPV6 bypass — CodeWhale CWE-918 7.4 High 2026-05-28
CVE-2026-45374 CodeWhale: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files — CodeWhale CWE-94 9.6 Critical 2026-05-28

This page lists every published CVE security advisory associated with Hmbown. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.