mise has 4 CVEs on record. The busiest recent month was June 2026 with 4. The median CVSS is 7.4 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.4
- Publish → KEV
- —
- Last 90 days
- 0 prev 4
4
Total CVEs
1
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-33646Critical· 9.6Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)53CVE-2026-55441High· 8.6Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository47CVE-2026-55448Medium· 6.3Mise's local credential_command executes untrusted config35CVE-2026-54557Medium· 5.5mise HTTP backend uses raw version path for install symlink destination30
mise vulnerabilities
CVEs affecting mise, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-54557Medium· 5.5mise HTTP backend uses raw version path for install symlink destination
mise HTTP backend uses raw version path for install symlink destination
▾ Sunlitmise · miseEPSS 0.17%via GHSA
CVE-2026-55441High· 8.6Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository
Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository
▾ Twilightmise · miseEPSS 0.18%via GHSA
CVE-2026-55448Medium· 6.3Mise's local credential_command executes untrusted config
Mise's local credential_command executes untrusted config
▾ Sunlitmise · miseEPSS 0.16%via GHSA
CVE-2026-33646Critical· 9.6Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)
Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)
▾ Midnightmise · miseEPSS 0.69%via GHSA