Browse / Homebrew

Homebrew

See its reports on the map

What gets reported to Homebrew

• Information Disclosure5
• Access Control3
• Memory Corruption2
• Misconfiguration2
• Other weaknesses1
• Code Execution1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Email enumeration of usersInformation Disclosure · medium
   145 votes
2. Broken parsing of Git diff allows an attacker to inject arbitrary Ruby scripts to Casks on official tapscritical
   49 votes
3. GitHub API Key for BrewTestBot is publicly exposedInformation Disclosure · critical
   27 votes
4. [https://jenkins.brew.sh] Jenkins in Debug Mode with Stack Traces EnabledStack Overflow · medium
   14 votes
5. Homebrew privilege escalation vulnerabilityPrivilege Escalation · high
   10 votes
6. Homebrew installed LaunchDaemons create simple root esclationsPrivilege Escalation · high
   8 votes
7. [bot.brew.sh] Full Path DisclosureInformation Disclosure · medium
   8 votes
8. Bypass of the installation sandbox by injecting keystrokes with TIOCSTIImproper Access Control - Generic · low
   5 votes