Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE

Google patches a CVSS 10 Gemini CLI vulnerability that allowed hackers to use prompt injection and privilege escalation for a full supply chain compromise...

io.micronaut.starter:micronaut-micronaut-cli (2.0.0.rc2), io.micronaut.starter:micronaut-starter-api (2.0.0.rc2) +27 more potentially affected by CVE-2026-44242 via io.micronaut:micronaut-inject (2.0.0.rc2)

io.micronaut:micronaut-inject MAVEN version 2.0.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-inject and may be impacted: - io.micronaut.starter:micronaut-micronaut-cli 2.0.0.rc2 - io.micronaut.starter:micronaut-starter-a...

arca (>=0.1.1, <=0.3.1), epab (>=2018.4.2.1, <=2018.4.2.3) +3 more potentially affected by CVE-2026-44243 via gitpython (2.1.9)

gitpython PYPI version 2.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - arca =0.1.1, =2018.4.2.1, =1.0.3, =0.0.0, =0.4.1 - ubuntudesign-documentation-builder 1.6.0 Source cves: CVE-2026-44243 Source advisory:...

bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-44243 via gitpython (2.1.3)

gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-44243 Source advisory: OSV:GHSA-7545-FCXQ-7J24...

CVE-2026-41898 vulnerabilities

Vulnerabilities for packages: bootc, sqlx, rustls-openssl-client, guestproxyagent, sccache, sdp-k8s-injector, deno, ztunnel-fips, komodo, typst, valkey-ldap, rustup, sentry-cli, rpm-sequoia, vector...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: gomplate-fips, flux-image-automation-controller, argo-workflows-fips, tfsec, packer-fips, pulumi-language-dotnet, grafana-fips, trufflehog, kargo, dagger, flux-fips, skaffold-fips, kaniko-fips, argo-events-fips, cerbos, chainloop-cli-fips, mapotf-fips, gitaly,...

CVE-2026-41907 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, redisinsight, langfuse, py3-captum, wazuh-dashboard-fips, argo-workflows, arangodb, kubeflow-pipelines, drupal, renovate, dbgate-fips, nextcloud-server, jupyter-base-notebook, saf, azurite, gemini-cli, nemo,...

CVE-2026-35254

Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with network access to compromise Oracle OCI CLI. Successful attacks of this vulnerability can result in...

CVE-2026-35254

CVE-2026-35254 affects Oracle OCI CLI (Oracle Open Source Projects) with affected version 3.77. The vulnerability enables an unauthenticated, network-accessible attacker to cause Oracle OCI CLI to place imported files outside the intended directory, indicating a path traversal-like impact. CVSS3....

CVE-2026-35254

Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with network access to compromise Oracle OCI CLI. Successful attacks of this vulnerability can result in...

EUVD-2026-27534

Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with network access to compromise Oracle OCI CLI. Successful attacks of this vulnerability can result in...

GHSA-WPQR-6V78-JR5G vulnerabilities

Vulnerabilities for packages: gemini-cli...

proxmox-pci-switcher (>=0.10.12, <=0.12.0), supercharged-cli (>=0.0.1, <=0.0.11) potentially affected by CVE-2026-44405 via paramiko (2.10.2)

paramiko PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - proxmox-pci-switcher =0.10.12, =0.0.1, =0.0.11 Source cves: CVE-2026-44405 Source advisory: OSV:GHSA-R374-RXX8-8654...

bamboo-lib (>=0.0.37, <=0.0.39), debu (>=0.0.3, <=0.1.0) +6 more potentially affected by CVE-2026-44405 via paramiko (2.4.1)

paramiko PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - bamboo-lib =0.0.37, =0.0.3, =0.0.1, =0.0.7, =0.2.0, =0.2.1 Source cves: CVE-2026-44405 Source advisory: OSV:GHSA-R374-RXX8-8654...

benchmark-runner (1.0.664), celium-cli (0.2.1) +56 more potentially affected by CVE-2026-44405 via paramiko (3.5.0)

paramiko PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - benchmark-runner 1.0.664 - celium-cli 0.2.1 - chat-ai-client 0.0.1 - compliance-trestle =3.7.0, =0.1.4, =0.1.2, =0.1.1, =1.0.0, =1.2.6, =1.0.1,...

aztk (>=0.10.0, <=0.10.3), azure-cli (>=2.0.58, <=2.0.66) +74 more potentially affected by CVE-2026-44405 via paramiko (2.4.3)

paramiko PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - aztk =0.10.0, =2.0.58, =0.2.13, =0.1.0, =0.0.4, =0.5.6rc2, =0.9.191, =0.3.0rc1, =1.0.3, =0.1.0, =5.0.3, =1.2.8, =1.0.5, =0.1.55, =0.1.62 and mor...

Oracle OCI CLI 路径遍历漏洞

Oracle OCI CLI is a cloud infrastructure management command-line tool developed by Oracle Corporation in the United States. Version 3.77 of Oracle OCI CLI contains a path traversal vulnerability. This vulnerability allows unauthorized attackers to access the system through the network, enabling...

PT-2026-37373

Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects. The supported versions that is affected is v2.3.2. Easily exploitable vulnerability allows unauthenticated attacker to compromise Oracle Cloud Native Environment Command Line...

CVE-2026-35254: Improper Limitation of a Pathname to a Restricted Directory

Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with network access to compromise Oracle OCI CLI. Successful attacks of this vulnerability can result in...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +283 more potentially affected by CVE-2026-24120 via vm2 (>=3.0.0, <=3.10.4)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...