goose: goose: Shell History and Environment Leak via Terminal Integration

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

Important: Red Hat Security Advisory: goose security update

An update for goose is now available for Red Hat Enterprise Linux 10.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: goose security update

An update for goose is now available for Red Hat Enterprise Linux 9.8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

goose: goose: Shell History and Environment Leak via Terminal Integration

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

SUSE CVE-2026-111079

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data-such as API tokens,...

CVE-2026-111079

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

CVE-2026-111079 Goose: goose: shell history and environment leak via terminal integration

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

EUVD-2026-108113

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

CVE-2026-111079

A vulnerability exists in Goose where the terminal integration feature captures shell command history and transmits it verbatim to Large Language Model (LLM) provider endpoints without sanitization. If a user inputs sensitive data such as API tokens, passwords, or environment variables , this inf...

CVE-2026-111079 Goose: goose: shell history and environment leak via terminal integration

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

CVE-2026-111079

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

Linux Distros Unpatched Vulnerability : CVE-2026-111079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without...

Red Hat: CVE-2026-111079: goose: goose: Shell History and Environment Leak via Terminal Integration

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

PT-2026-121335

Name of the Vulnerable Software and Affected Versions Goose affected versions not specified Description A flaw exists when the terminal integration feature is enabled, causing the application to capture shell command history and send it without sanitization to configured Large Language Model LLM...

[SECURITY] Fedora 41 Update: gh-2.74.0-1.fc41

A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...

[SECURITY] Fedora 42 Update: gh-2.74.0-1.fc42

A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...

MAL-2022-4058 Malicious code in js-lib-terminal-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dcf2e5bf15d9675a00d7528be2775ff89da7335da5ba9321cdbb19d9cb9f76c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in js-lib-terminal-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dcf2e5bf15d9675a00d7528be2775ff89da7335da5ba9321cdbb19d9cb9f76c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in js-lib-terminal-integration-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7503515ab3ea4e66d9467dc8c42af202ce8dd2018894ccd7c17399898d6a5f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in js-lib-terminal-integration-example

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...