CVE-2026-75915

creationtimestamp| type| source ---|---|--- 2026-08-18 16:27:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7g2vbdpdike67 2026-09-04 20:35:11+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-h539-c7r8-3xq4...

CVE-2026-75915 CodeWhale before 0.8.64 Environment Variable Leak via js_execution

CodeWhale versions before 0.8.64 contain an environment variable exposure vulnerability in the jsexecution tool that fails to scrub parent process environment variables before spawning Node.js. Attackers can craft malicious JavaScript code executed by the tool to read process.env and leak API key...