@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +290 more potentially affected by CVE-2026-47698 via vm2 (>=3.0.0, <=3.11.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +290 more potentially affected by CVE-2026-47686 via vm2 (>=3.0.0, <=3.11.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

MAL-2026-14111 Malicious code in sugarball-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e600e0ab4f99d726e508d2ad82425ab2bc06f141c333dfecf0bdba9edd66f6d3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in sugarball-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e600e0ab4f99d726e508d2ad82425ab2bc06f141c333dfecf0bdba9edd66f6d3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

PYSEC-2026-3753

opensslencrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/pid/cmdline to retrieve plaintext passwords and keystore passwords...

PYSEC-2026-3753

opensslencrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/pid/cmdline to retrieve plaintext passwords and keystore passwords...

CVE-2026-74873

opensslencrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/pid/cmdline to retrieve plaintext passwords and keystore passwords...

CVE-2026-74873 openssl_encrypt before 1.4.0 Password Exposure via CLI Argument

opensslencrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/pid/cmdline to retrieve plaintext passwords and keystore passwords...

CVE-2026-74873 openssl_encrypt before 1.4.0 Password Exposure via CLI Argument

opensslencrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/pid/cmdline to retrieve plaintext passwords and keystore passwords...

CVE-2026-74873 openssl_encrypt before 1.4.0 Password Exposure via CLI Argument

opensslencrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/pid/cmdline to retrieve plaintext passwords and keystore passwords...

CVE-2026-74873

The openssl_encrypt tool (before v1.4.0) passes --password values as visible process arguments, retrievable by any local user via ps aux or /proc/[pid]/cmdline, exposing plaintext and keystore passwords. CVSS 5.5 (local) / 8.7 (network). Upgrade to v1.4.0 or pass passwords via stdin/env instead o...

EUVD-2026-60092

opensslencrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/pid/cmdline to retrieve plaintext passwords and keystore passwords...

[SECURITY] Fedora 44 Update: jfrog-cli-2.119.0-1.fc44

JFrog CLI is a client that provides a simple interface that automates access to the JFrog products...

PT-2026-76606

Name of the Vulnerable Software and Affected Versions openssl encrypt pip versions prior to 1.4.8 Description An information exposure issue exists where the diagnostic commands 'hsm fido2-test' and 'hsm onlykey-test' unconditionally print the full derived hardware pepper as hex to stdout/stderr v...

OPENSUSE-SU-2026:11529-1 forgejo-cli-0.6.0-2.1 on GA media

These are all security issues fixed in the forgejo-cli-0.6.0-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-80577

These are all security issues fixed in the forgejo-cli-0.6.0-2.1 package on the GA media of openSUSE Tumbleweed...

kubeshark-cli-53.4.0-1.1 on GA media (moderate)

kubeshark-cli-53.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11519-1 Rating: moderate Cross-References: CVE-2026-49445 CVSS scores: CVE-2026-49445 SUSE : 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

Fedora 44 : jfrog-cli (2026-9f70b173c8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9f70b173c8 advisory. Update to 2.119.0. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

threatcl v0.6.6

threatcl Threat Modeling with HCL What happened to hcltm? hcltm has been renamed to threatcl. Welcome! Overview !TIP Want to read the new documentation? Head over to threatcl.dev There are many different ways in which a threat model can be documented. From a simple text file, to more in-depth wor...

GHSA-C974-W86C-VPFW vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, flux, mattermost, cert-manager-cmctl, k3s, kaf, src, terraform-provider-azurerm, falco-exporter, kyverno, azurefile-csi, cerbos, dagdotdev, guac, opentelemetry-collector-contrib, vexctl, grafana-pyroscope, falcosidekick, cloudflared,...