Advisories · Technology

github.com/checkmarx/ast-cli.

Every CVE that names github.com/checkmarx/ast-cli among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-77157 CVE record

CVSS 6.3 Medium

ast-cli: Auto-update downloads are not verified against a checksum before execution
- github.com/checkmarx/ast-cli
- CWE-353
Not analysed yet 22 Oct 2026
CVE-2026-77156 CVE record

CVSS 6.3 Medium

ast-cli: Path traversal in tar extraction on Linux/macOS allows writes outside the install directory
- github.com/checkmarx/ast-cli
- Path traversal
Not analysed yet 22 Oct 2026