jo-cli (1.0.2) potentially affected by CVE-2026-14257 +1 more via brace-expansion (3.0.0)

brace-expansion NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on brace-expansion and may be impacted: - jo-cli 1.0.2 Source cves: CVE-2026-14257, CVE-2026-69152 Source advisory: SNYK:JS-BRACEEXPANSION-18512280...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

CVE-2026-41850 vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi-registry, apache-camel-karavan-devmode, camunda, apache-activemq, zipkin, kafbat-ui-fips, kafbat-ui, camunda-zeebe, apache-activemq-fips, keycloak-config-cli...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi-registry, apache-camel-karavan-devmode, camunda, apache-activemq, zipkin, kafbat-ui-fips, kafbat-ui, camunda-zeebe, apache-activemq-fips, keycloak-config-cli...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi-registry, apache-camel-karavan-devmode, camunda, apache-activemq, zipkin, kafbat-ui-fips, kafbat-ui, camunda-zeebe, apache-activemq-fips, keycloak-config-cli...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi-registry, apache-camel-karavan-devmode, camunda, apache-activemq, zipkin, kafbat-ui-fips, kafbat-ui, camunda-zeebe, apache-activemq-fips, keycloak-config-cli...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi-registry, apache-camel-karavan-devmode, camunda, apache-activemq, zipkin, kafbat-ui-fips, kafbat-ui, camunda-zeebe, apache-activemq-fips, keycloak-config-cli...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi-registry, apache-camel-karavan-devmode, camunda, apache-activemq, zipkin, kafbat-ui-fips, kafbat-ui, camunda-zeebe, apache-activemq-fips, keycloak-config-cli...

EUVD-2026-51595

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

CVE-2026-25552

The CVE-2026-25552 entry concerns Ghost CLI before 1.30.1, where an IP spoofing vulnerability allows unauthenticated remote attackers to bypass rate-limiting on self-hosted Ghost instances. The underlying issue is misusing the X-Forwarded-For header in combination with a misconfigured Nginx setup...

CVE-2026-25552 Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

CVE-2026-25552 Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

OPENSUSE-SU-2026:11410-1 cf-cli-8.18.4+git.0.3fcd823a1-1.1 on GA media

These are all security issues fixed in the cf-cli-8.18.4+git.0.3fcd823a1-1.1 package on the GA media of openSUSE Tumbleweed...

@aws-amplify/amplify-util-uibuilder (>=1.2.13-studio-q1-release.0, <=1.14.27), @aws-amplify/cli (>=7.6.11-beta.0, <=7.6.26) +4 more potentially affected by CVE-2025-4318 via @aws-amplify/codegen-ui-react (>=2.1.0, <=2.14.2)

@aws-amplify/codegen-ui-react NPM version =2.1.0, =1.2.13-studio-q1-release.0, =7.6.11-beta.0, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =0.1.0-alpha.0, =0.1.0-next.0 - edilkamin 0.0.1 Source cves: CVE-2025-4318 Source advisory: OSV:GHSA-HF3J-86P7-MFW8...