Malicious code in shopify-cli-dependencies (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8631 Malicious code in shopify-cli-dependencies (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2026-13769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has not been configured to restrict file...

The vulnerability of the read_cli_parser_preference() function in the NTS-KE protocol analyzer for computer network traffic analysis tool Wireshark allows a hacker to cause a service failure.

The vulnerability of the readcli parserpreference function in the NTS-KE protocol analyzer for computer network traffic analysis tool Wireshark is related to the assignment of a null pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0

Summary An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. Impact An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration,...

CVE-2026-46672: Improper Neutralization of Formula Elements in a CSV File

Actual is a local-first personal finance app. Prior to 26.6.0, @actual-app/cli ships a hand-rolled CSV serializer in packages/cli/src/output.ts used whenever the global --format csv option is passed, whose escapeCsv helper only handles RFC 4180 delimiter, quote, and newline escaping and does not...

Malicious code in color-cli-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43d15f0d189a3dff03fe5549073cad30c2c0d648e6b1b12d1385689c84c6888c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview color-cli-log is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-6830 Malicious code in color-cli-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43d15f0d189a3dff03fe5549073cad30c2c0d648e6b1b12d1385689c84c6888c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview awesome-cli-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in awesome-cli-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8126f65c2eaf406ae6c6510e03e8bbef8f243974be621b7e38a0c52d9e521a18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6799 Malicious code in awesome-cli-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8126f65c2eaf406ae6c6510e03e8bbef8f243974be621b7e38a0c52d9e521a18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-28292 vulnerabilities

Vulnerabilities for packages: gemini-cli...

GHSA-JCXM-M3JX-F287 vulnerabilities

Vulnerabilities for packages: gemini-cli...

CVE-2026-28291 vulnerabilities

Vulnerabilities for packages: gemini-cli...

GHSA-R275-FR43-PM7Q vulnerabilities

Vulnerabilities for packages: gemini-cli...

Apache Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...

GHSA-RPV3-6645-2VQC Apache Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...

GHSA-P47F-322F-WHFH vulnerabilities

Vulnerabilities for packages: kafbat-ui, nextflow, cassandra, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, dependency-track-apiserver, keycloak-config-cli, ontop-fips, knative-kafka-broker-fips, hadoop-fips, kafbat-ui-fips, airbyte-server, nacos-docker, trino,...

GHSA-P47F-322F-WHFH vulnerabilities

Vulnerabilities for packages: sonar-scanner-cli, kserve-modelmesh, keycloak-config-cli, management-api-for-apache-cassandra-5.0, akhq, cassandra-reaper, nextflow, dependency-track, sonarqube, cassandra, trino, zookeeper...