jan
v0.8.8Jan is an open source alternative to ChatGPT that runs 100% offline on your computer.
- Maintenance
- Active917 commits in 3 months · bus factor 5
- License
- OtherUnknown
- Security
- 11 advisories2 critical, 5 high, 3 medium, 1 low
- Supported versions
- No scheduleendoflife.date does not track this project
45.7k stars · 3.2k forks · 588 open issues · last release 18 days ago · data checked 1 hour ago
Security advisories
All advisories on GitHubThe 11 most recent advisories published by the maintainers: 2 critical, 5 high, 3 medium, 1 low. Check the patched version against the one you run.
- lowGHSA-63g6-28fr-v4rmOct 29, 2026Untrusted Search Path in jan (explorer.exe on Windows)
- Affected
- <= 0.8.7
- Patched in
- 0.8.8
- highGHSA-3g72-3hpm-xrwjOct 29, 2026Remote Code Execution caused by opening external website in the app and the exposure of `electronAPI`
- Affected
- <= 0.5.14
- Patched in
- 0.5.15
- mediumGHSA-g9j3-j6vx-jqf7Oct 29, 2026DNS Rebinding Vulnerability in Jan AI
- Affected
- <= 0.5.17
- Patched in
- 0.6.0
- criticalGHSA-p283-6wfr-f93jOct 29, 2026Remote Code Execution via Unsanitized HTML in Model Hub Content
- Affected
- <= 0.7.5
- Patched in
- 0.7.6
- highGHSA-x6p8-7cp8-c3p6Oct 29, 2026Binding the local API server to 0.0.0.0 silently discards the Trusted Hosts allowlist and reflects any CORS origin
- Affected
- >= 0.8.0, <= 0.8.4
- Patched in
- 0.8.5
- mediumGHSA-7j4g-mj5j-p842Oct 29, 2026Workspace guard bypass via dangling symlink traversal in agent write and edit tools
- Affected
- >= 0.8.5, <= 0.8.7
- Patched in
- 0.8.8
- mediumGHSA-j2wh-9mvv-j5w6Oct 29, 2026Path Traversal via unsanitized assistant_id in /v1/orchestrations endpoint (CWE-22)
- Affected
- >= 0.8.0, <= 0.8.7
- Patched in
- 0.8.8
- highGHSA-9qq3-j6jv-qmpvOct 29, 2026Path traversal via unvalidated thread_id in thread/message Tauri IPC commands enables arbitrary file write/read/delete outside the Jan data folder
- Affected
- <= 0.8.7
- Patched in
- 0.8.8
- highGHSA-959c-grmq-2738Oct 29, 2026Shell Command Injection via unsanitized environment variable values in launch_claude_code_with_config
- Affected
- >= 0.7.7, <= 0.8.7
- Patched in
- 0.8.8
- highGHSA-66pg-h682-8cmfOct 29, 2026Cross-site request forgery on the local API proxy, Origin extracted but only validated during CORS preflight
- Affected
- >= 0.6.9, <= 0.8.7
- Patched in
- 0.8.8
- criticalGHSA-j6hv-vhmg-vpj6Oct 29, 2026One-click RCE: malicious MCP/tool content navigates the main window to an attacker origin that invokes app commands (ACL bypass) to spawn arbitrary processes
- Affected
- <= 0.8.7
- Patched in
- 0.8.8