jarrodwatts has 3 CVEs on record. The busiest recent month was May 2026 with 3. The median CVSS is 4.6 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 4.6
- Publish → KEV
- —
- Last 90 days
- 0 prev 3
jarrodwatts vulnerabilities
CVEs affecting jarrodwatts, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-47090Medium· 4.6Claude HUD 0.0.12 Terminal Injection via OSC 8 Hyperlinks
Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control characters or encoding embedded values, allowing attackers to inject …
CVE-2026-47091Low· 3.3Claude HUD 0.0.12 Path Traversal via transcript_path
Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated transcript_path value via stdin JSON. Attackers can access any file r…
CVE-2026-47092High· 7.8Claude HUD 0.0.12 Arbitrary Command Execution via COMSPEC Environment Variable
Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSPEC environment variable. Attackers can set COMSPEC to an …