CVE-2025-9844

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6...

CVE-2025-9844

creationtimestamp| type| source ---|---|--- 2025-09-23 13:47:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115253919369684711 2025-09-24 05:19:08+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lzkoslrr4r2p 2025-09-24 17:50:48+00:00| seen|...

@flosum/cli (>=0.0.0, <=0.0.5), @flosum/salesforce (>=1.14.10, <=1.17.12-test.18) potentially affected by CVE-2025-9844 via @salesforce/cli (>=2.67.7, <=2.100.4)

@salesforce/cli NPM version =2.67.7, =0.0.0, =1.14.10, =1.17.12-test.18 Source cves: CVE-2025-9844 Source advisory: SNYK:JS-SALESFORCECLI-13011148...

AlmaLinux 8 : osbuild-composer (ALSA-2025:9844)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9844 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly fro...