{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.8.5","last_affected":"0.8.41"}],"component":"deepseek-tui","cve_ids":["CVE-2026-75856"],"ecosystem":"crates.io","epss":0.00495,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6v2g-fpxh-pmmh","id":"tcs_01M5KETSZNF82DW9Q27Y9WBH16","modified_at":"2026-09-04T19:00:05.311955033Z","published_at":"2026-09-04T18:05:12Z","references":["https://osv.dev/vulnerability/GHSA-6v2g-fpxh-pmmh","https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-6v2g-fpxh-pmmh","https://nvd.nist.gov/vuln/detail/CVE-2026-75856","https://github.com/Hmbown/CodeWhale/commit/26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e","https://github.com/Hmbown/CodeWhale","https://www.vulncheck.com/advisories/codewhale-before-ssrf-bypass-via-dns-pinning-toctou"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-6v2g-fpxh-pmmh","url":"https://osv.dev/vulnerability/GHSA-6v2g-fpxh-pmmh"}],"summary":"CodeWhale: SSRF‌ bypass - TOCTOU on DNS failure for DNS pinning"}