11426 matches found
Malicious code in tyepescript-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a867a5fc578cb6dcb759370e837d1a4c7e24f6db63c0c0f781e2c24995905e6 tyepescript-cli is a typosquat of typescript. Its scripts/postinstall.js XOR-decodes key stf2026 a set of obfuscated byte arrays that resolve to an...
MAL-2026-14143 Malicious code in tyepescript-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a867a5fc578cb6dcb759370e837d1a4c7e24f6db63c0c0f781e2c24995905e6 tyepescript-cli is a typosquat of typescript. Its scripts/postinstall.js XOR-decodes key stf2026 a set of obfuscated byte arrays that resolve to an...
AZL-97004 CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5
The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...
Missing Authorization
Overview geolens-cli is an Apache-2.0 command-line interface for the GeoLens API. Login, scan, publish, and export STAC against any GeoLens instance. Affected versions of this package are vulnerable to Missing Authorization inadequate authorization checks on cross-dataset references in multiple A...
SUSE CVE-2026-64652
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...
SUSE CVE-2026-64653
GitHub CLI gh is GitHub's official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...
SUSE CVE-2026-64654
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that...
SUSE CVE-2026-64655
GitHub CLI gh is GitHub's official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is...
OPENSUSE-SU-2026:21605-1 Security update for forgejo-cli
This update for forgejo-cli fixes the following issues: Changes in forgejo-cli: - Update vendored bytes crate to 1.12.1 CVE-2026-25541: Fixed an integer overflow in BytesMut::reserve that could corrupt the tracked capacity and lead to out-of-bounds slices boo1274529. - update to 0.6.0:...
GO-2026-6248 uniget CLI has an EDITOR Command Injection in gitlab.com/uniget-org/cli
uniget CLI has an EDITOR Command Injection in gitlab.com/uniget-org/cli...
GO-2026-6247 uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability in gitlab.com/uniget-org/cli
uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability in gitlab.com/uniget-org/cli...
getsploit v3.0.1
Getsploit Search and download public exploits from theVulners database — online, or fully offline from a local index. Get an API key · Vulners search · Changelog · Architecture · Security policy !Getsploit searching online, building a local FTS5 index, then searching and mirroring...
PT-2026-80464
uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability in gitlab.com/uniget-org/cli...
PT-2026-80465
uniget CLI has an EDITOR Command Injection in gitlab.com/uniget-org/cli...
PT-2026-80463
uniget CLI: Metadata signature verification only runs when UNIGET IGNORE METADATA SIGNATURE is set in gitlab.com/uniget-org/cli...
forgejo-cli-0.6.0-2.1 on GA media (moderate)
forgejo-cli-0.6.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11529-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA...
Fortinet FortiWeb Broken access control in the RADIUS type admin group (FG-IR-26-158)
The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-158 advisory. - An Improper Authentication vulnerability CWE-287 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0...
preflight v0.20.1
Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...
