9048 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-15869
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Amazon Web Services AWS developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source...
@cloudbase/cli (>=2.8.19, <=2.11.7) potentially affected by CVE-2025-57755 via @musistudio/claude-code-router (1.0.36)
@musistudio/claude-code-router NPM version 1.0.36 is affected by a known vulnerability. The following packages have a transitive dependency on @musistudio/claude-code-router and may be impacted: - @cloudbase/cli =2.8.19, =2.11.7 Source cves: CVE-2025-57755 Source advisory:...
card-ocr-fastmcp (1.0.0) potentially affected by CVE-2025-9262 via @wong2/mcp-cli (1.13.0)
@wong2/mcp-cli NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on @wong2/mcp-cli and may be impacted: - card-ocr-fastmcp 1.0.0 Source cves: CVE-2025-9262 Source advisory: SNYK:JS-WONG2MCPCLI-12205740...
CVE-2025-9262
A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...
CVE-2025-9262
A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...
GHSA-XH9H-692F-MMG4 Withdrawn Advisory: Microsoft Knack ReDoS Vulnerability in the Introspection Module
Withdrawn Advisory This advisory has been withdrawn because the attack surface of this vulnerability is outside of Knack's intended functionality. The maintainer states the following: These CVEs are invalid. Knack is a CLI framework used by Azure CLI. It's a local library, not a web service. In...
DEBIAN-CVE-2025-54364
Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. optiondescriptions employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings containing a...
DEBIAN-CVE-2025-54363
Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. extractfullsummaryfromsignature employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings...
UBUNTU-CVE-2025-54363
Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. extractfullsummaryfromsignature employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings...
mcp-cli 安全漏洞
mcp-cli is a model context protocol checker for Wong2 Personal Developer. A security vulnerability exists in mcp-cli version 1.13.0, which stems from an incorrect operation of the function redirectToAuthorization in the file /src/oauth/provider.js resulting in os command injection...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: terragrunt, rancher-fleet, trivy-operator, syft, k9s, steampipe, terraform, grype, trivy, snyk-cli, conftest, opentofu, kubescape, zot, kots, zarf, tflint, wolfictl, tfsec, xeol...
GHSA-WJRX-6529-HCJ3 vulnerabilities
Vulnerabilities for packages: terragrunt, rancher-fleet, trivy-operator, syft, k9s, steampipe, terraform, grype, trivy, snyk-cli, conftest, opentofu, kubescape, zot, kots, zarf, tflint, wolfictl, tfsec, xeol...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: kots, kubescape, wolfictl, trivy-operator, zarf, opentofu, terraform, conftest, xeol, trivy, grype-fips, cloudbeat-fips, steampipe, trivy-fips, k9s, snyk-cli, rancher-fleet, tfsec, terragrunt, syft-fips, rancher-fleet-fips, syft, cloudbeat, trivy-operator-fips,...
Malicious Package
Overview meid-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in meid-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54a1eca3fe980472cd2c418bc50f361595c86cc248665cdf8e01129e7af96f66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in avalon-util-cli (npm)
The package avalon-util-cli was found to contain malicious code...
Malicious code in wepack-cli (npm)
The package wepack-cli was found to contain malicious code...
Malicious code in my-cli-app (npm)
The package my-cli-app was found to contain malicious code...