Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

warpdotdev vulnerabilities

10 published CVEs name warpdotdev among the affected products.

Newest CVEs

  • CVE-2026-48704

    Warp Markdown notebook links may open executable local files

    warpdotdev · warp

    High8.8
  • CVE-2026-48719

    Warp branch selector command injection via Git branch names

    warpdotdev · warp

    High8.0
  • CVE-2026-48720

    Warp: SSH remote output can lead to local file overwrite and persistence

    warpdotdev · warp

    High8.8
  • CVE-2026-48721

    Warp: Env-var prefixes can lead to denylisted command autoexecution

    warpdotdev · warp

    High8.6
  • CVE-2026-48731

    Warp: Linux external editor command injection

    warpdotdev · warp

    High7.8
  • CVE-2026-48732

    Warp: Remote SSH cwd can lead to unauthorized remote command execution

    warpdotdev · warp

    High8.8
  • CVE-2026-54686

    Warp: DCS lifecycle hook spoofing can alter terminal session metadata

    warpdotdev · warp

    Medium4.3
  • CVE-2026-54699

    Warp: OS command injection when opening terminal links from WSL

    warpdotdev · warp

    High7.7
  • CVE-2026-48703

    Warp: Command Injection via Warp code search tool arguments

    warpdotdev · warp

    High7.8
  • CVE-2026-48725

    Warp may allow terminal output to access the local clipboard through OSC 52

    warpdotdev · warp

    High8.1