PYSEC-2026-400 llm CLI tool contains a code injection vulnerability via `--functions` command-line argument

The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function definitions. However, the tool directly executes the provided code using the unsafe exec function...

PT-2026-53321

Name of the Vulnerable Software and Affected Versions Snowflake CLI versions prior to 3.19 Description Improper handling of untrusted remote references allows server-side request forgery SSRF, a condition where a server is coerced into making requests to an unintended destination. The SQL stateme...

PT-2026-53310

Name of the Vulnerable Software and Affected Versions Snowflake CLI versions prior to 3.19 Description Improper neutralization of local CLI parameters allows unintended SQL execution. A user can trigger this issue by providing crafted values to the Cortex SQL or object listing command paths,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: prometheus-fips, argo-cd, chisel, coder-fips, opentofu-fips, seaweedfs-rocksdb, kubevela-fips, cloudbeat-fips, minio-fips, frankenphp-8.3, vitess, cloudbeat, kube-arangodb-fips, flux-image-automation-controller, cilium-cli, zarf, harbor-fips, harbor,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-guardduty, terraform-provider-tls-fips, chisel, coder-fips, crossplane-provider-keycloak-fips, crossplane-provider-aws-route53resolver-fips, minio-fips, crossplane-provider-aws-datasync, frankenphp-8.3, vault, cloudbeat,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-guardduty, terraform-provider-tls-fips, chisel, coder-fips, crossplane-provider-keycloak-fips, crossplane-provider-aws-route53resolver-fips, minio-fips, crossplane-provider-aws-datasync, frankenphp-8.3, vault, cloudbeat,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: prometheus-fips, argo-cd, opentofu-fips, frankenphp-8.3, teleport-operator-fips, vitess, kube-arangodb-fips, cilium-cli, harbor-fips, harbor, buildah, etcd-fips, gatekeeper, tekton-pipelines, kine, omnictl-multiarch-fips, flux, mattermost-fips, frankenphp-8.2,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: prometheus-fips, argo-cd, chisel, coder-fips, opentofu-fips, seaweedfs-rocksdb, kubevela-fips, cloudbeat-fips, minio-fips, frankenphp-8.3, teleport-operator-fips, vitess, cloudbeat, kube-arangodb-fips, flux-image-automation-controller, cilium-cli, zarf, harbor-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, hcloud, terraform-provider-azurerm, go-discover, policy-controller, pulumi-language-java, crossplane-provider-azure-sql, ko, helm, ksops, kots, flux-source-controller, teleport, caddy, step, kubernetes, glab, pulumi-language-yaml, gomplate...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, kyverno, containerd, kaf, trivy-operator, trivy, zarf, prometheus-operator, helm, zot, kots, snyk-cli, flux-source-controller, prometheus, skaffold, fscrypt, spire-server, kubernetes-dashboard, kubernetes, external-dns, aactl,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, kyverno, containerd, kaf, docker-cli-buildx, prometheus-operator, helm, zot, buildah, kots, snyk-cli, prometheus, fscrypt, spire-server, kubernetes-dashboard, kubernetes, external-dns, aactl, cloud-provider-aws, telegraf, k3s, loki, flux, kin...

GO-2026-5656 Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users in github.com/kubetail-org/kubetail/modules/cli

Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users in github.com/kubetail-org/kubetail/modules/cli. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go...

GO-2026-5335 GitHub CLI: GitHub Actions log output in `gh run view` allows terminal escape sequence injection in github.com/cli/cli

GitHub CLI: GitHub Actions log output in gh run view allows terminal escape sequence injection in github.com/cli/cli...

GO-2026-5271 GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via `gh attestation`, `gh release verify`, and `gh release verify-asset` commands in github.com/cli/cli

GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands in github.com/cli/cli...

MAL-2026-6421 Malicious code in leo-cli (npm)

The leo-cli npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

Malicious code in leo-cli (npm)

The leo-cli npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

CVE-2026-48721

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...

CVE-2026-48721

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...

CVE-2026-48721 Warp: Env-var prefixes can lead to denylisted command autoexecution

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...

CVE-2026-48721 Warp: Env-var prefixes can lead to denylisted command autoexecution

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...