Homebrew Jan
3 CVEs affecting Homebrew Jan. Latest disclosed: 2024-06-04. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-37273 | Critical | 9.8 | 2024-06-04 | An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafte… |
CVE-2024-36858 | Critical | 9.8 | 2024-06-04 | An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted… |
CVE-2024-36857 | High | 7.5 | 2024-06-04 | Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface. |