48 matches found
MAL-2026-12702 Malicious code in devplatform-cli-plugin-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8460a9cc2fce88e69d25156ea88612a5a67ffba26709ce88900d573e2f4b3ea On require of the package, index.js loads bootstrap.js which selects a platform-specific asset path linuxx64, linuxarm64, darwin, win32, downloads an...
@saltcorn/cli (>=1.5.0-beta.0, <=1.5.5), @saltcorn/mobile-builder (>=1.5.0-beta.0, <=1.5.5) potentially affected by CVE-2026-42259 via @saltcorn/server (>=1.5.0, <=1.5.5-beta.0)
@saltcorn/server NPM version =1.5.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.5 Source cves: CVE-2026-42259 Source advisory: OSV:GHSA-F3G8-9XV5-77GV...
@ind-rcg/generator (>=262.1002.0-beta.2, <=264.1004.0-beta.1), @ind-rcg/modeler-sfdx-cli-plugin (>=262.1002.0-beta.4, <=264.1004.0-beta.4) +2 more potentially affected by CVE-2026-26801 via pdfmake (>=0.3.0-beta.2, <=0.3.2)
pdfmake NPM version =0.3.0-beta.2, =262.1002.0-beta.2, =262.1002.0-beta.4, =262.1002.0-beta.3, =1.0.0, =2.3.0 Source cves: CVE-2026-26801 Source advisory: OSV:GHSA-WP52-R2FP-4VMR...
PT-2025-50977
Name of the Vulnerable Software and Affected Versions Lightning Flow Scanner versions 6.10.5 and below Description Lightning Flow Scanner, a CLI plugin, VS Code Extension, and GitHub Action for Salesforce Flow analysis and optimization, is affected by an issue where maliciously crafted flow...
[SECURITY] Fedora 41 Update: docker-buildx-0.30.1-1.fc41
Docker CLI plugin for extended build capabilities with BuildKit...
[SECURITY] Fedora 42 Update: docker-buildx-0.30.1-1.fc42
Docker CLI plugin for extended build capabilities with BuildKit...
CVE-2025-64140
Jenkins Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary shell commands...
EUVD-2025-36658
Jenkins Azure CLI Plugin does not restrict the commands it executes...
CVE-2025-64140
Jenkins Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary shell commands...
CVE-2025-64140
The Jenkins Azure CLI Plugin (version 0.9 and earlier) fails to restrict the commands it executes on the Jenkins controller. This lack of command validation allows attackers who possess Item/Configure permissions to execute arbitrary shell commands on the Jenkins master node. As of the current do...
PT-2025-44289
Name of the Vulnerable Software and Affected Versions Jenkins Azure CLI Plugin versions 0.9 and earlier Description The Jenkins Azure CLI Plugin does not restrict the commands it executes on the Jenkins controller. This allows attackers with Item/Configure permission to execute arbitrary shell...
CVE-2025-64140: Improper Neutralization of Special Elements used in an OS Command
Jenkins Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary shell commands...
[SECURITY] Fedora 41 Update: docker-buildx-0.29.1-1.fc41
Docker CLI plugin for extended build capabilities with BuildKit...
[SECURITY] Fedora 41 Update: docker-buildx-0.27.0-1.fc41
Docker CLI plugin for extended build capabilities with BuildKit...
MAL-2025-17111 Malicious code in cli-plugin-graphiql (npm)
The package cli-plugin-graphiql was found to contain malicious code...
Malicious code in cli-plugin-migrate (npm)
The package cli-plugin-migrate was found to contain malicious code...
Malicious code in cli-plugin-graphiql (npm)
The package cli-plugin-graphiql was found to contain malicious code...
Malicious code in cli-plugin-script (npm)
The package cli-plugin-script was found to contain malicious code...