Approved changes feed: RSS · Atom

cpe:2.3:a:homebrew:jan:0.4.12:*:*:*:*:*:*:*

part: a version: 0.4.12 update: *

VendorHomebrew (c3911df6-aec6-53da-9bad-f0c813599c0e)
ProductJan (f529a7f4-974c-5cee-a52c-914905fb0e43)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-37273 vulnerable 2026-06-08 06:39:47.025965 Details available
An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.
Published: 2024-06-04T18:26:07.231Z
Updated: 2025-02-13T15:59:48.602Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36858 vulnerable 2026-06-08 06:39:45.722670 Details available
An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.
Published: 2024-06-04T18:26:06.014Z
Updated: 2025-02-13T15:59:45.923Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36857 vulnerable 2026-06-08 06:39:45.722222 Details available
Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.
Published: 2024-06-04T18:26:04.843Z
Updated: 2025-02-13T15:59:45.280Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.