Hmbown Codewhale vulnerabilities

• hmbown codewhale CodeWhale before 0.8.64 Environment Variable Leak via js_execution CVE-2026-75915 Fix available 8.7 HighAugust 18, 2026
• hmbown codewhale CodeWhale before 0.8.64 Path Traversal via image_analyze symlink CVE-2026-75914 Fix available 8.7 HighAugust 18, 2026
• hmbown codewhale CodeWhale before 0.8.64 Argument Injection via git_show CVE-2026-75913 Fix available 8.5 HighAugust 18, 2026
• hmbown codewhale CodeWhale before 0.8.64 Argument Injection via git_blame CVE-2026-75912 Fix available 8.3 HighAugust 18, 2026
• hmbown codewhale CodeWhale before 0.8.64 Remote Code Execution via allow_shell CVE-2026-75911 Fix available 8.5 HighAugust 18, 2026
• hmbown codewhale CodeWhale before 0.8.64 Arbitrary File Read via instructions CVE-2026-75859 Fix available 8.7 HighAugust 18, 2026
• hmbown codewhale CodeWhale rlm_eval before 0.8.64 Remote Code Execution CVE-2026-75858 Fix available 8.5 HighAugust 18, 2026
• hmbown codewhale CodeWhale before 0.8.64 Privilege Escalation via exec_shell_interact CVE-2026-75857 Fix available 7.3 HighAugust 18, 2026
• hmbown codewhale CodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOU CVE-2026-75856 Fix available 9.2 CriticalAugust 18, 2026
• hmbown codewhale CodeWhale: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files CVE-2026-45374 Fix available 9.6 CriticalMay 14, 2026
• hmbown codewhale CodeWhale: SSRF‌ IPV6 bypass CVE-2026-45373 Fix available 7.4 HighMay 14, 2026
• hmbown codewhale CodeWhale: run_tests Tool Enables RCE via Malicious Repository Without Approval CVE-2026-45311 Fix available 9.6 CriticalMay 14, 2026
• hmbown codewhale CodeWhale: SSRF via HTTP Redirect Bypass in fetch_url Tool CVE-2026-45310 Fix available 7.4 HighMay 14, 2026