crates.io/deepseek-tui CVE-2026-75911: high 7.8, EPSS 0.25%

CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-gx45-xrj5-g6c4
• https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-gx45-xrj5-g6c4
• https://nvd.nist.gov/vuln/detail/CVE-2026-75911
• https://github.com/Hmbown/CodeWhale/commit/43563356b98c6b993085554da82e77370160a31c
• https://github.com/Hmbown/CodeWhale
• https://www.vulncheck.com/advisories/codewhale-before-remote-code-execution-via-allow-shell

CVE-2026-75911 · published 2026-09-04T18:14:09Z · modified 2026-09-04T19:00:05.295715565Z · JSON