[ Vendor · 1 CVEs ]
fallow-rs
CVEs affecting fallow-rs published in the last 30 days, plus any fallow-rs CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-115569 | 23 Oct 2026 | CVSS 3.3 | Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project rootFallow is a codebase intelligence tool for TypeScript and JavaScript. From 2.68.0 until 3.34.0, Fallow follows attacker-controlled Jest projects… | Fix |