Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Jan
(Homebrew)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 3 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2024-06-04 | CVE-2024-36857 | Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface. | Jan | 7.5 | ||
| 2024-06-04 | CVE-2024-36858 | An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file. | Jan | 9.8 | ||
| 2024-06-04 | CVE-2024-37273 | An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file. | Jan | 9.8 |