tesla vulnerabilities

5 known advisories · Dependencies not checked

SEVERITYADVISORYPUBLISHED

HighTesla has decompression bomb on response bodyGHSA-mc85-72gr-vm9fCVE-2026-48594EEF-CVE-2026-48594Affected >=0.6.0 <1.18.3Fixed in 1.18.3OSV source ↗5 months ago
HighTesla: Authorization header leaks on cross-origin redirect via case-sensitive filteringGHSA-9m9w-gxf7-rh8mCVE-2026-48595EEF-CVE-2026-48595Affected >=0.6.0 <1.18.3Fixed in 1.18.3OSV source ↗5 months ago
HighTesla vulnerable to atom exhaustion via untrusted URL schemeGHSA-h74c-q9j7-mpcmCVE-2026-48597EEF-CVE-2026-48597Affected >=1.3.0 <1.18.3Fixed in 1.18.3OSV source ↗5 months ago
LowTesla has CRLF injection in request `Content-Type` header via `add_content_type_param`GHSA-q7jx-v53g-848wCVE-2026-48596EEF-CVE-2026-48596Affected >=0.8.0 <1.18.3Fixed in 1.18.3OSV source ↗5 months ago
LowTesla vulnerable to multipart part smuggling via unescaped `content-disposition` valuesGHSA-28jh-g32x-v9v4CVE-2026-48598EEF-CVE-2026-48598Affected >=0.8.0 <1.18.3Fixed in 1.18.3OSV source ↗5 months ago
  • Codex
  • Claude Code
  • VS Code
  • GitHub Copilot
  • Cursor
  • Cline
  • Windsurf
  • Google Anti-gravity
  • OpenCode
  • Pi
  • Gemini CLI
  • Hermes Agent
  • Zed
  • Junie
  • Qwen Code
  • Kiro
  • Kilo Code
  • Factory Droid

Set up GitHits for your agents

Run this command:

<> bash
npx githits@latest init

What happens next:

  1. Opens your browser to authorize GitHits
  2. Asks whether to set up GitHits at the user or project level
  3. Detects your supported AI coding tools
  4. Lets you choose which tools to configure
  5. Configures the selected tools