Is mise safe to use? Its security history

Every advisory, newest first

• VulnerabilityGHSA-g74g-rg72-j2p3 · 2026-10-15mise permits untrusted local configuration to override default shell arguments
• VulnerabilityGHSA-29hf-rm4x-xxph · 2026-06-23Mise's local credential_command executes untrusted config
• VulnerabilityGHSA-77g9-363w-rccq · 2026-06-23Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository
• VulnerabilityGHSA-f94h-j2qg-fxw3 · 2026-06-23mise HTTP backend uses raw version path for install symlink destination
• VulnerabilityGHSA-fjj5-v948-whjj · 2026-06-22Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)
• VulnerabilityGHSA-436v-8fw5-4mj8 · 2026-04-07Local settings bypass config trust checks

Check your version

Run cargo tree -i mise to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.

RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.