CVE-2026-13752: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by supplying crafted values to vulnerable command paths, causing Snowflake CLI to execute unintended SQL in the context of the user’s Snowflake session...

CVE-2026-13750: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials to be written to persistent local debug logs. An attacker could exploit this by obtaining read access to the affected user's local log files, causing credentials such as...

CVE-2026-13748: Improper Limitation of a Pathname to a Restricted Directory

Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitrary local file content to be read and transmitted to Snowflake services. An attacker could exploit this by supplying crafted repository or project content that referenced files outside the intended...

PT-2026-53629

Summary The substitute utcp args method in cli communication protocol.py inserts user-controlled tool args values directly into shell command strings without any sanitization or escaping. These commands are then executed via /bin/bash -c Unix or powershell.exe -Command Windows, allowing an attack...

CVE-2026-13744: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted repository content, project configuration, manifest data, or specification input, an attacker could cause Snowflake CLI to execute unintended SQL i...

PT-2026-53546

| Field | Value | |---|---| | Severity | Critical | | Type | Path traversal -- arbitrary file write via tar.extract without member validation | | Affected | src/praisonai/praisonai/cli/features/recipe.py:1170-1172 | Summary cmd unpack in the recipe CLI extracts .praison tar archives using raw...

PT-2026-53310

Name of the Vulnerable Software and Affected Versions Snowflake CLI versions prior to 3.19 Description Improper neutralization of local CLI parameters allows unintended SQL execution. A user can trigger this issue by providing crafted values to the Cortex SQL or object listing command paths,...

CVE-2026-13746: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. A user could trigger this issue by supplying crafted values to vulnerable Cortex SQL or object listing command paths, causing Snowflake CLI to execute unintended SQL in the...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cert-manager, vault-fips, argo-workflows-fips, kots, frankenphp-8.4, prometheus-mongodb-exporter, minio, aactl, knative-eventing-fips, vault, cloudbeat, kubescape-server, k9s-fips, istio, tigera-operator, cloudbeat-fips, flux-source-controller-fips, helm, coder,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: cert-manager, vault-fips, argo-workflows-fips, kots, frankenphp-8.4, prometheus-mongodb-exporter, minio, aactl, docker-cli-buildx, knative-eventing-fips, vault, istio, tigera-operator, teleport-operator-fips, helm, knative-kafka-broker-fips, cilium-cli,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: rancher-machine, cert-manager, rootlesskit-fips, gomplate-fips, witness, vault-fips, argo-workflows-fips, kots, frankenphp-8.4, prometheus-mongodb-exporter, minio, aactl, pulumi-kubernetes-operator, gatus-fips, docker-cli-buildx, knative-eventing-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: gomplate-fips, witness, vault-fips, frankenphp-8.4, kargo, knative-eventing-fips, gatus, caddy, sops, crossplane-provider-aws-cloudsearch, eksctl, crossplane-provider-aws-sesv2-fips, crossplane-provider-aws-acm, wolfictl, tigera-operator,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: gomplate-fips, witness, vault-fips, frankenphp-8.4, kargo, knative-eventing-fips, gatus, caddy, sops, crossplane-provider-aws-cloudsearch, eksctl, crossplane-provider-aws-sesv2-fips, crossplane-provider-aws-acm, wolfictl, tigera-operator,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: zarf, mods, k8sgpt, slsa-verifier, gitlab-kas, fulcio, act, flux-image-automation-controller, loki, podman, syft, step, nuclei, apko, chezmoi, tflint, ksops, buildah, openbao, step-kms-plugin, kubescape, docker-cli-buildx, zot, trivy, flux-notification-controller,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: zarf, kaf, kyverno, rancher-agent, kubernetes, osv-scanner, k9s, minio, istio, gitea, gitlab-kas, fscrypt, skaffold, flux-source-controller, kine, external-secrets-operator, prometheus, prometheus-operator, chisel, spire-server, flux-image-automation-controller,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kaf, kyverno, rancher-agent, kubernetes, minio, istio, gitlab-kas, fscrypt, kine, external-secrets-operator, prometheus, prometheus-operator, spire-server, falco-no-driver, external-dns, cilium, loki, rancher, podman, kubernetes-dashboard, opentelemetry-collector,...

GO-2026-5656 Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users in github.com/kubetail-org/kubetail/modules/cli

Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users in github.com/kubetail-org/kubetail/modules/cli. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go...

GO-2026-5335 GitHub CLI: GitHub Actions log output in `gh run view` allows terminal escape sequence injection in github.com/cli/cli

GitHub CLI: GitHub Actions log output in gh run view allows terminal escape sequence injection in github.com/cli/cli...

GO-2026-5271 GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via `gh attestation`, `gh release verify`, and `gh release verify-asset` commands in github.com/cli/cli

GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands in github.com/cli/cli...

Malicious code in stitch-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a0c5de3abe7924f58304e27e1537821c217c9348c060b31c5424407f9f10cc The npm package ships a preinstall lifecycle hook scripts/preinstall.js that, on npm install, reads classic installer-secret paths — /.gitconfig,...