CVE-2026-55448 mise: Local credential_command executes untrusted config

mise manages dev tools like node, python, cmake, and terraform. From 2026.3.15 until 2026.6.4, mise loads github.credentialcommand from local project config before any trust decision, then executes that value with sh -c when resolving a GitHub token. An attacker who can place a .mise.toml in a...

CVE-2023-5502

creationtimestamp| type| source ---|---|--- 2026-06-04 23:42:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnish75fes22...

CVE-2026-42547

creationtimestamp| type| source ---|---|--- 2026-06-04 23:16:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mniqyn4crz2g...

CVE-2026-10871

creationtimestamp| type| source ---|---|--- 2026-06-04 23:11:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mniqponzlm2h 2026-06-05 02:45:36+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnj4ndy4gf2f...

CVE-2026-5228

creationtimestamp| type| source ---|---|--- 2026-06-04 23:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mniq3d6wvj25...

CVE-2026-36499

creationtimestamp| type| source ---|---|--- 2026-06-04 22:54:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnipr2mk7m2o...

CVE-2024-6858

creationtimestamp| type| source ---|---|--- 2026-06-04 22:49:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnipigspj72x...

CVE-2026-5589

creationtimestamp| type| source ---|---|--- 2026-06-04 22:45:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnipayzrfm24...

CVE-2026-41518

creationtimestamp| type| source ---|---|--- 2026-06-04 21:01:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnijgd2nma2n 2026-06-04 22:22:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mninxty2z62m 2026-06-04 22:40:24+00:00| seen|...

CVE-2026-48040

creationtimestamp| type| source ---|---|--- 2026-06-04 19:29:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mniecjvsyh2f...

GHSA-8WHC-2WMV-WW35

creationtimestamp| type| source ---|---|--- 2026-06-04 19:11:03+00:00| seen| https://gist.github.com/alon710/e4f45dc043ae5511143b6c6428b68699...

CVE-2026-48480

creationtimestamp| type| source ---|---|--- 2026-06-04 18:50:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnic4kb5ip2y 2026-06-24 06:42:05+00:00| seen| https://gist.github.com/alon710/ce3b2aa80a723c8da0f2d02f44d2e2db...

GHSA-2GCR-MFCQ-WCC3

creationtimestamp| type| source ---|---|--- 2026-06-04 18:41:16+00:00| seen| https://gist.github.com/alon710/9a85ace33b5f15b6d07a68897c3ce675...

CVE-2026-47676

creationtimestamp| type| source ---|---|--- 2026-06-04 18:41:16+00:00| seen| https://gist.github.com/alon710/9a85ace33b5f15b6d07a68897c3ce675...

CVE-2026-43986

creationtimestamp| type| source ---|---|--- 2026-06-04 18:05:50+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mni7mj5dvi25 2026-06-04 23:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mniq3rzwzs22...

CVE-2026-7774

creationtimestamp| type| source ---|---|--- 2026-06-04 16:25:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnhzymng362i 2026-06-05 13:35:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnkaxtlnnt2f...

CVE-2026-10864

creationtimestamp| type| source ---|---|--- 2026-06-04 15:51:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116692633027353872...

CVE-2026-10809

creationtimestamp| type| source ---|---|--- 2026-06-04 15:34:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhx5xhi3a2g...

CVE-2026-10810

creationtimestamp| type| source ---|---|--- 2026-06-04 15:19:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhwd46ag22x...

CVE-2026-10806

creationtimestamp| type| source ---|---|--- 2026-06-04 15:15:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhw3glr5g2b...