Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-45373
7.4
HIGHCVSS v3
Published
May 28, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, although SSRF is validated against hostnames that resolve to private IPv6 addresses, when providing the IPV6 in URL as http://[::1], the SSRF defenses do not work. This vulnerability is fixed in 0.8.26.
GitHub