amber-cli-1.13.1+git20250329.c2e3bb8-1.1 on GA media (moderate)

amber-cli-1.13.1+git20250329.c2e3bb8-1.1 on GA media Announcement ID: openSUSE-SU-2025:15037-1 Rating: moderate Cross-References: CVE-2025-30204 CVSS scores: CVE-2025-30204 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-30204 SUSE : 8.7...

OPENSUSE-SU-2025:15037-1 amber-cli-1.13.1+git20250329.c2e3bb8-1.1 on GA media

These are all security issues fixed in the amber-cli-1.13.1+git20250329.c2e3bb8-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in pretty-cli-logger (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 94cd11911ce2a0937d9e56087ce9487db18da5bb20df7f1f8948f8356d65c31d Contains an obfuscated code that will download and run a remote script. At the time of the analysis, the remote URLs were delivering empty results --- Category...

MAL-2025-191816 Malicious code in pretty-cli-logger (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 94cd11911ce2a0937d9e56087ce9487db18da5bb20df7f1f8948f8356d65c31d Contains an obfuscated code that will download and run a remote script. At the time of the analysis, the remote URLs were delivering empty results --- Category...

OSV-2025-289 Stack-buffer-overflow in ot::Cli::Utils::OutputLine

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411460530 Crash type: Stack-buffer-overflow READ Crash state: ot::Cli::Utils::OutputLine ot::Cli::Dns::HandleDnsRecordResponse ot::Dns::Client::FinalizeQuery...

CVE-2024-51744 affecting package dcos-cli for versions less than 1.2.0-18

CVE-2024-51744 affecting package dcos-cli for versions less than 1.2.0-18. A patched version of the package is available...

argocd-cli-2.14.10-1.1 on GA media (moderate)

argocd-cli-2.14.10-1.1 on GA media Announcement ID: openSUSE-SU-2025:15006-1 Rating: moderate Cross-References: CVE-2025-29786 CVSS scores: CVE-2025-29786 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-29786 SUSE : 8.2...

OPENSUSE-SU-2025:15006-1 argocd-cli-2.14.10-1.1 on GA media

These are all security issues fixed in the argocd-cli-2.14.10-1.1 package on the GA media of openSUSE Tumbleweed...

AZL-60545 CVE-2025-22872 affecting package cf-cli for versions less than 8.7.11-3

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

@aws-amplify/amplify-app (>=5.0.39-beta-latest.0, <=5.0.42), @aws-amplify/amplify-appsync-simulator (>=2.16.10-beta-latest.0, <=2.16.12) +67 more potentially affected by unknown CVE via aws-cdk-lib (>=2.172.0, <=2.189.0)

aws-cdk-lib NPM version =2.172.0, =5.0.39-beta-latest.0, =2.16.10-beta-latest.0, =5.0.38-beta-latest.0, =3.7.18-beta-latest.0, =3.1.26-beta-latest.0, =5.7.12-beta-latest.0, =3.5.18-beta-latest.0, =3.5.39-beta-latest.0, =5.1.31-beta-latest.0, =2.26.28-beta-latest.0, =5.5.18-beta-latest.0,...

OPENSUSE-SU-2025:14997-1 oci-cli-3.54.1-1.1 on GA media

These are all security issues fixed in the oci-cli-3.54.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-30654

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the User Interface UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged, authenticated attacker with access to the CLI to access sensitive information. Through the execution of a specific...

CVE-2025-30652

An Improper Handling of Exceptional Conditions vulnerability in routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker executing a CLI command to cause a Denial of Service DoS. When asregex-optimized is configured and a specific "show...

CVE-2024-51744 affecting package cf-cli for versions less than 8.4.0-24

CVE-2024-51744 affecting package cf-cli for versions less than 8.4.0-24. A patched version of the package is available...

CVE-2024-51744 affecting package dcos-cli for versions less than 1.2.0-21

CVE-2024-51744 affecting package dcos-cli for versions less than 1.2.0-21. A patched version of the package is available...

CVE-2025-23387

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowed unauthenticated users to list all CLI authentication tokens and delete them before the CLI is able to get the token value.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9....

CVE-2025-23387

CVE-2025-23387 concerns Rancher (SUSE Rancher) CLI authentication token exposure. Unauthenticated users could list and delete all CLI tokens before the token value is retrieved, enabling potential information disclosure and token invalidation. Affected Rancher versions: 2.8.0–2.8.13, 2.9.0–2.9.7,...

CVE-2025-23387 Rancher's SAML-based login via CLI can be denied by unauthenticated users

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowed unauthenticated users to list all CLI authentication tokens and delete them before the CLI is able to get the token value.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9....

CVE-2025-23387 Rancher's SAML-based login via CLI can be denied by unauthenticated users

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowed unauthenticated users to list all CLI authentication tokens and delete them before the CLI is able to get the token value.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9....

SUSE SLES15 Security Update : azure-cli-core (SUSE-SU-2025:1182-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1182-1 advisory. - CVE-2025-24049: Fixed improper neutralization of special elements used in a command allows an unauthorized attacker to elevate privileges...