GHSA-G74G-RG72-J2P3 mise permits untrusted local configuration to override default shell arguments

Summary Untrusted local .mise.toml settings can set the shell interpreter args unix/windows defaultinline / defaultfile shellargs, yielding arbitrary command execution, because those command-interpreter settings were not added to the globalonly denylist the CVE-2026-55448 fix relies on. Code...

mise permits untrusted local configuration to override default shell arguments

Summary Untrusted local .mise.toml settings can set the shell interpreter args unix/windows defaultinline / defaultfile shellargs, yielding arbitrary command execution, because those command-interpreter settings were not added to the globalonly denylist the CVE-2026-55448 fix relies on. Code...