tocsin

CVE-2026-45311

3 advisories.

crates.io/deepseek-tui CVE-2026-45311: critical 9.6

DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval

Action: Upgrade deepseek-tui to 0.8.23 or later.

cargo update -p deepseek-tui --precise 0.8.23

Affected

introducedfixedlast affected
0.3.00.8.23-

Fixed versions

0.8.23

Sources

CVE-2026-45311 · published · modified · JSON

crates.io/deepseek-tui-cli CVE-2026-45311: critical 9.6

DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval

Action: Upgrade deepseek-tui-cli to 0.8.23 or later.

cargo update -p deepseek-tui-cli --precise 0.8.23

Affected

introducedfixedlast affected
0.3.00.8.23-

Fixed versions

0.8.23

Sources

CVE-2026-45311 · published · modified · JSON

npm/deepseek-tui CVE-2026-45311: critical 9.6

DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval

Action: Upgrade deepseek-tui to 0.8.23 or later.

npm i deepseek-tui@0.8.23

Affected

introducedfixedlast affected
0.3.00.8.23-

Fixed versions

0.8.23

Sources

CVE-2026-45311 · published · modified · JSON