Browse all 7 CVE security advisories affecting jdx. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-103929 | mise permits untrusted local configuration to override default shell arguments — mise CWE-78 | 7.8 | High | 2026-10-14 |
| CVE-2026-71477 | mise: Incorrect file ownership, when installed by the root user using `install.sh` — mise CWE-278 | 6.7 | Medium | 2026-08-18 |
| CVE-2026-33646 | mise: Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass) — mise CWE-94 | 9.6 | Critical | 2026-06-26 |
| CVE-2026-55441 | mise: Arbitrary command execution via task-include files in an untrusted, config-less repository — mise CWE-78 | 8.6 | High | 2026-06-26 |
| CVE-2026-54557 | mise HTTP backend uses raw version path for install symlink destination — mise CWE-22 | 5.5 | Medium | 2026-06-26 |
| CVE-2026-55448 | mise: Local credential_command executes untrusted config — mise CWE-78 | 6.3 | Medium | 2026-06-26 |
| CVE-2026-35533 | mise has a local settings bypass config trust checks — mise CWE-284 | 7.8 | High | 2026-04-07 |
This page lists every published CVE security advisory associated with jdx. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.