PT-2026-53310

Name of the Vulnerable Software and Affected Versions Snowflake CLI versions prior to 3.19 Description Improper neutralization of local CLI parameters allows unintended SQL execution. A user can trigger this issue by providing crafted values to the Cortex SQL or object listing command paths,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cilium-cli, cert-manager, coder-fips, trivy-operator, etcd-fips, zarf-fips, k3s, prometheus, argo-workflows-fips, flux-fips, gitlab-kas, argocd-image-updater, flux-image-automation-controller, keda-fips, gitea, drone, opentofu-fips, harbor-fips, knative-serving,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: atlantis-fips, cilium-cli, terraform-provider-aws-fips, coder-fips, cluster-api-azure-controller, crossplane-provider-aws-organizations-fips, crossplane-provider-azure-servicefabric, external-secrets-fips, crossplane-provider-aws-elb-fips, gitlab-kas,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: atlantis-fips, cilium-cli, terraform-provider-aws-fips, coder-fips, cluster-api-azure-controller, crossplane-provider-aws-organizations-fips, crossplane-provider-azure-servicefabric, external-secrets-fips, crossplane-provider-aws-elb-fips, gitlab-kas,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: cilium-cli, cert-manager, etcd-fips, k3s, prometheus, argo-workflows-fips, gitlab-kas, keda-fips, opentofu-fips, harbor-fips, knative-serving, tigera-operator, kine, zitadel, nerdctl, commercial-grafana, loki, tekton-pipelines, upwind-agent, podman-fips,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: argo-events, pulumi, witness, cilium-cli, cert-manager, coder-fips, docker, trivy-operator, etcd-fips, zarf-fips, k3s, prometheus, act, argo-workflows-fips, flux-fips, syft-fips, splunk-otel-collector-fips, gitlab-kas, argocd-image-updater,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cilium-cli, cloud-provider-aws, pulumi-kubernetes-operator, rancher-machine, terraform-provider-azurerm, crossplane-provider-azure-storage, opentelemetry-collector, guac, buildah, prometheus-operator, eksctl, telegraf, osv-scanner, vault-benchmark,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cilium-cli, cloud-provider-aws, trivy, opentelemetry-collector, spire-server, flux-image-automation-controller, external-dns, prometheus-operator, telegraf, osv-scanner, minio, gitlab-kas, kine, kots, loki, zot, cert-manager, flux, k3s, prometheus, zarf,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cilium-cli, cloud-provider-aws, opentelemetry-collector, spire-server, external-dns, buildah, prometheus-operator, telegraf, minio, gitlab-kas, kine, kots, loki, zot, cert-manager, flux, k3s, prometheus, falco-no-driver, nerdctl, knative-serving, containerd, aactl,...

GO-2026-5656 Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users in github.com/kubetail-org/kubetail/modules/cli

Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users in github.com/kubetail-org/kubetail/modules/cli. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go...

GO-2026-5335 GitHub CLI: GitHub Actions log output in `gh run view` allows terminal escape sequence injection in github.com/cli/cli

GitHub CLI: GitHub Actions log output in gh run view allows terminal escape sequence injection in github.com/cli/cli...

GO-2026-5271 GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via `gh attestation`, `gh release verify`, and `gh release verify-asset` commands in github.com/cli/cli

GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands in github.com/cli/cli...

MAL-2026-6421 Malicious code in leo-cli (npm)

The leo-cli npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

Malicious code in leo-cli (npm)

The leo-cli npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

CVE-2026-48721

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...

CVE-2026-48721

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...

CVE-2026-48721 Warp: Env-var prefixes can lead to denylisted command autoexecution

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...

CVE-2026-48721 Warp: Env-var prefixes can lead to denylisted command autoexecution

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...

CVE-2026-12537

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI versions prior to 0.39.1 and run-gemini-cli GitHub Action versions prior to 0.1.22 on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously...

CVE-2026-12537

Summary (CVE-2026-12537) : The vulnerability affects Google Gemini CLI container launcher (versions prior to 0.39.1) and the run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms. It stems from improper neutralization in an OS command, enabling an unprivileged attacker ...