github.com/tilt-dev/tilt vulnerabilities
CVEs whose affected-version data names the github.com/tilt-dev/tilt package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-55882HighTilt: Unauthenticated pprof debug endpoints on the Tilt HUD server
Tilt: Unauthenticated pprof debug endpoints on the Tilt HUD server
▾ Twilighttilt-dev · github.com/tilt-dev/tiltEPSS 0.52%via GHSA
CVE-2026-55883HighTilt: Cross-site WebSocket hijacking of the Tilt HUD stream
Tilt: Cross-site WebSocket hijacking of the Tilt HUD stream
▾ Twilighttilt-dev · github.com/tilt-dev/tiltEPSS 0.26%via GHSA
CVE-2026-55884CriticalTilt: Missing authentication on the network-exposed Tilt HUD server
Tilt: Missing authentication on the network-exposed Tilt HUD server
▾ Midnighttilt-dev · github.com/tilt-dev/tiltEPSS 0.50%via GHSA