Browse / Homebrew

Homebrew

See its reports on the map

What gets reported to Homebrew

• Information Disclosure5
• Access Control3
• Memory Corruption2
• Misconfiguration2
• Other weaknesses1
• Code Execution1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Email enumeration of usersInformation Disclosure · medium
   145 votes
2. Broken parsing of Git diff allows an attacker to inject arbitrary Ruby scripts to Casks on official tapscritical
   49 votes
3. GitHub API Key for BrewTestBot is publicly exposedInformation Disclosure · critical
   27 votes
4. [https://jenkins.brew.sh] Jenkins in Debug Mode with Stack Traces EnabledStack Overflow · medium
   14 votes
5. Homebrew privilege escalation vulnerabilityPrivilege Escalation · high
   10 votes
6. Brew bootstrap process is insecureInformativeCode Injection · medium
   8 votes
7. Homebrew installed LaunchDaemons create simple root esclationsPrivilege Escalation · high
   8 votes
8. [bot.brew.sh] Full Path DisclosureInformation Disclosure · medium
   8 votes
9. Host header InjectionInformativeViolation of Secure Design Principles · medium
   7 votes
10. Bypass of the installation sandbox by injecting keystrokes with TIOCSTIImproper Access Control - Generic · low
    5 votes
11. Server version disclosure on [jenkins.brew.sh]InformativeInformation Disclosure
    4 votes
12. Stack Trace on jenkins.brew.shInformativeStack Overflow · medium
    3 votes
13. clickjacking at brew.shN/AUI Redressing (Clickjacking) · low
    2 votes
14. Sensitive information disclosure via response headers on jenkins.brew.shDuplicateInformation Exposure Through an Error Message · low
    1 votes