PYSEC-2026-400 llm CLI tool contains a code injection vulnerability via `--functions` command-line argument

The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function definitions. However, the tool directly executes the provided code using the unsafe exec function...

PT-2026-53321

Name of the Vulnerable Software and Affected Versions Snowflake CLI versions prior to 3.19 Description Improper handling of untrusted remote references allows server-side request forgery SSRF, a condition where a server is coerced into making requests to an unintended destination. The SQL stateme...

PT-2026-53310

Name of the Vulnerable Software and Affected Versions Snowflake CLI versions prior to 3.19 Description Improper neutralization of local CLI parameters allows unintended SQL execution. A user can trigger this issue by providing crafted values to the Cortex SQL or object listing command paths,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: harbor-fips, k9s, terraform, cilium, gitlab-kas, nemo, trivy-fips, zarf, minio, docker-machine-driver-harvester, chisel, seaweedfs-rocksdb, rancher-agent, argo-cd-fips, zot, flux-source-controller-fips, drone-fips, trivy, gatekeeper, nerdctl, aactl,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ssm-fips, crossplane-provider-azure-orbital, cloudflared, trivy-fips, gitlab-workhorse-ce, chisel, crossplane-provider-aws-iam, flux-operator, crossplane-provider-aws-iam-fips, packer, seaweedfs-rocksdb, argo-cd-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ssm-fips, crossplane-provider-azure-orbital, cloudflared, trivy-fips, gitlab-workhorse-ce, chisel, crossplane-provider-aws-iam, flux-operator, crossplane-provider-aws-iam-fips, packer, seaweedfs-rocksdb, argo-cd-fips,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: teleport-operator-fips, harbor-fips, terraform, cilium, gitlab-kas, nemo, minio, packer, rancher-agent, argo-cd-fips, zot, gatekeeper, packer-fips, nerdctl, aactl, knative-kafka-broker-fips, kyverno-fips, kaf, reports-server, loki, harbor, knative-serving, traefik,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: teleport-operator-fips, gitlab-runner, harbor-fips, k9s, rancher-machine, terraform, cilium, gatus-fips, gitlab-kas, nemo, trivy-fips, buildkitd, chainloop-cli-fips, docker-machine-driver-harvester, minio, zarf, chainloop-cli, jfrog-cli, pulumi-language-yaml, chisel,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, ko, gomplate, chezmoi, zarf, grype, crossplane-provider-azure-sql, splunk-otel-collector, rancher-machine, pulumi-kubernetes-operator, scorecard, glab, cert-manager, aactl, fulcio, step-kms-plugin, trivy, nuclei, mods, docker,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: prometheus, k3s, argocd-image-updater, rancher, gitlab-kas, spire-server, istio, prometheus-operator, loki, flux-image-automation-controller, kubernetes-dashboard, helm, cilium-cli, kyverno, trivy-operator, zarf, kubernetes, cert-manager, aactl, trivy, kubescape,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: prometheus, k3s, buildah, rancher, gitlab-kas, spire-server, istio, prometheus-operator, loki, kubernetes-dashboard, helm, cilium-cli, kyverno, docker-cli-buildx, kubernetes, podman, cert-manager, aactl, mattermost, minio, zot, knative-serving, fscrypt, nerdctl, kine...

GO-2026-5656 Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users in github.com/kubetail-org/kubetail/modules/cli

Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users in github.com/kubetail-org/kubetail/modules/cli. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go...

GO-2026-5335 GitHub CLI: GitHub Actions log output in `gh run view` allows terminal escape sequence injection in github.com/cli/cli

GitHub CLI: GitHub Actions log output in gh run view allows terminal escape sequence injection in github.com/cli/cli...

GO-2026-5271 GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via `gh attestation`, `gh release verify`, and `gh release verify-asset` commands in github.com/cli/cli

GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands in github.com/cli/cli...

MAL-2026-6421 Malicious code in leo-cli (npm)

The leo-cli npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

Malicious code in leo-cli (npm)

The leo-cli npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

CVE-2026-48721

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...

CVE-2026-48721

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...

CVE-2026-48721 Warp: Env-var prefixes can lead to denylisted command autoexecution

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...

CVE-2026-48721 Warp: Env-var prefixes can lead to denylisted command autoexecution

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...