Homebrew 7.0.0 Adds Vulnerability Scanner and Stronger Sandboxing
Summary
Homebrew 7.0.0 adds the `brew vulns` scanner, a Homebrew-specific OSV advisory database, and stricter macOS install sandboxing. The release also fully launches BrewUI on macOS 26 and later.
Key points
- The new `brew vulns` command scans installed formulae, selected formulae, or formulae and dependencies listed in a Brewfile.
- The scanner queries OSV.dev using upstream repository and version information, checks potential matches, and considers whether Homebrew has already applied a security patch.
- Homebrew’s OSV-format advisory database records vulnerabilities affecting formula versions and revisions, including backported fixes.
- Install sandboxing now blocks home-directory access by default and separates network-enabled dependency downloads from offline installation.
- BrewUI is fully released as a native interface for macOS 26 “Tahoe” and later.
- The release also supports concurrent package downloads, preparation, and installation to improve speed.
Article Details
- Event Type
- Software release with security enhancements
- Impact
- Homebrew 7.0.0 adds a vulnerability-scanning command and Homebrew-specific advisory database, strengthens sandboxing by blocking home-directory access by default and separating network-enabled downloads from offline installation, and fully releases the BrewUI interface for macOS 26 and later. The release also enables concurrent package operations to improve installation speed.
Products
BrewUIIt also fully releases the native BrewUI interface on macOS 26 “Tahoe” and later, while improving package installation speed through concurrent operations.HomebrewHomebrew 7.0.0 introduces a built-in vulnerability scanner, a Homebrew-specific advisory database, and stronger sandboxing controls for macOS package installs.