- Latest release
- 0.8.40 (May 21, 2026): no advisory affects it
- Newest unaffected release
- 0.8.40 (May 21, 2026), the latest release
- Advisories
- 2 · 1 critical, 1 high
- Weekly downloads
- 37
- Dependents
- 0
- Releases
- 45 since 0.3.28 (Mar 3, 2026)
- Registry
- crates.io
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2026-45311Affects 0.3.28 to 0.8.22 (0.8.23 is outside it)
- CVE-2026-45310Affects 0.3.28 to 0.8.21 (0.8.22 is outside it)
Advisories 2
- CVE-2026-45311Critical 9.6
CodeWhale: run_tests Tool Enables RCE via Malicious Repository Without Approval
Affected: from 0.3.0, fixed in 0.8.23.
Fixed in 0.8.23 (released May 9, 2026, 19 days before disclosure).
The latest release, 0.8.40, is not affected.
- CVE-2026-45310High 7.4
CodeWhale: SSRF via HTTP Redirect Bypass in fetch_url Tool
Affected: fixed in 0.8.22.
Fixed in 0.8.22 (released May 8, 2026, 20 days before disclosure).
The latest release, 0.8.40, is not affected.