[ Vendor · 2 CVEs ]

aaif-goose

CVEs affecting aaif-goose published in the last 30 days, plus any aaif-goose CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-109561 12 Oct 2026 CVSS 4.2 aaif-goose goosegoose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode…
CVE-2026-72718 10 Aug 2026 CVSS 7.0 aaif-goose goosegoose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the `goose review` command runs the system `git` executable to gather…