package

crates.io/mise

pkg:crates.io/mise

MEDIUM6.3crates.io

Mise's local credential_command executes untrusted config

Modified: 6/23/2026

HIGH7.7crates.io

Local settings bypass config trust checks

Modified: 6/12/2026

HIGH8.6crates.io

Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository

Modified: 6/23/2026

MEDIUM5.5crates.io

mise HTTP backend uses raw version path for install symlink destination

Modified: 7/21/2026

CRITICAL9.6crates.io

Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)

Modified: 7/21/2026