{"action":"Upgrade deepseek-tui to 0.8.41 or later.","affected":[{"fixed":"0.8.41","introduced":"0.8.5"}],"component":"deepseek-tui","cve_ids":["CVE-2026-75856"],"ecosystem":"npm","epss":0.00495,"exploited":false,"fixed_versions":["0.8.41"],"ghsa_id":"GHSA-6v2g-fpxh-pmmh","id":"tcs_01M5KETT7HG93ZYJRMZ7VFS6JS","modified_at":"2026-09-04T19:00:05.311955033Z","published_at":"2026-09-04T18:05:12Z","references":["https://osv.dev/vulnerability/GHSA-6v2g-fpxh-pmmh","https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-6v2g-fpxh-pmmh","https://nvd.nist.gov/vuln/detail/CVE-2026-75856","https://github.com/Hmbown/CodeWhale/commit/26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e","https://github.com/Hmbown/CodeWhale","https://www.vulncheck.com/advisories/codewhale-before-ssrf-bypass-via-dns-pinning-toctou"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-6v2g-fpxh-pmmh#npm/deepseek-tui","url":"https://osv.dev/vulnerability/GHSA-6v2g-fpxh-pmmh"}],"summary":"CodeWhale: SSRF‌ bypass - TOCTOU on DNS failure for DNS pinning"}