goose vulnerabilities

CVEs whose affected-version data names the goose package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85623High· 8.8

3w ago

goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection

goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe se…

▾ Twilightaaif-goose · gooseEPSS 0.58%via NVD