Filtered by vendor Homebrew Subscriptions
Filtered by product Jan Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-36857 1 Homebrew 1 Jan 2024-06-11 7.5 High
Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.
CVE-2024-36858 1 Homebrew 1 Jan 2024-06-11 9.8 Critical
An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.
CVE-2024-37273 1 Homebrew 1 Jan 2024-06-11 9.8 Critical
An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.