Warpdotdev
10 CVEs tracked since 2026. Since Jun 2026, none of them reached CISA KEV.
Warpdotdev CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-06 | 10 | 0 |
Products
The products that kept showing up in Warpdotdev's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 10 most recently published vulnerabilities affecting Warpdotdev.
- CVE-2026-48704Warp Markdown notebook links may open executable local files8.8
- CVE-2026-48719Warp branch selector command injection via Git branch names8.0
- CVE-2026-48720Warp: SSH remote output can lead to local file overwrite and persistence8.8
- CVE-2026-48721Warp: Env-var prefixes can lead to denylisted command autoexecution8.6
- CVE-2026-48731Warp: Linux external editor command injection7.8
- CVE-2026-48732Warp: Remote SSH cwd can lead to unauthorized remote command execution8.8
- CVE-2026-54686Warp: DCS lifecycle hook spoofing can alter terminal session metadata4.3
- CVE-2026-54699Warp: OS command injection when opening terminal links from WSL7.7
- CVE-2026-48703Warp: Command Injection via Warp code search tool arguments7.8
- CVE-2026-48725Warp may allow terminal output to access the local clipboard through OSC 528.1
The record
- Peak rank
- #144 in Jun 2026
- Busiest month shown
- Jun 2026, 10 CVEs
- Months with a KEV entry
- 0 since Jun 2026
- Monthly snapshots
- 1 since 2026