12833 matches found
airflow-run (0.4.9), ais-dom (>=0.117.0b0, <=2021.2.4) +49 more potentially affected by CVE-2026-26007 via cryptography (3.2.0)
cryptography PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - airflow-run 0.4.9 - ais-dom =0.117.0b0, =2.0.1.dev14, =2.0.2 - azureml-accel-models 1.23.0 - azureml-cli-common 1.23.0 -...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: dbmate, kapp-controller, vault-benchmark, kubernetes-dashboard-auth, mockery, glow, local-path-provisioner, rekor, flux, neuvector-dbgen, wuzz, ingress-nginx-controller, sealed-secrets, docker, php-fpmexporter, q, supercronic, amazon-cloudwatch-agent-operator, ko,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: dbmate, kapp-controller, vault-benchmark, kubernetes-dashboard-auth, mockery, glow, local-path-provisioner, rekor, flux, neuvector-dbgen, wuzz, ingress-nginx-controller, sealed-secrets, php-fpmexporter, q, supercronic, amazon-cloudwatch-agent-operator, ko,...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: vertical-pod-autoscaler-fips, backup-restore-operator-fips, aws-otel-collector, coredns-fips, prometheus-node-exporter-fips, kubebuilder, mesosphere-vsphere-csi-fips, dex-fips, influxd, kyverno-policy-reporter-kyverno-plugin, flux-kustomize-controller, karma,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: vertical-pod-autoscaler-fips, backup-restore-operator-fips, aws-otel-collector, coredns-fips, prometheus-node-exporter-fips, kubebuilder, mesosphere-vsphere-csi-fips, dex-fips, influxd, kyverno-policy-reporter-kyverno-plugin, flux-kustomize-controller, karma,...
GHSA-8JVR-VH7G-F8GX vulnerabilities
Vulnerabilities for packages: vertical-pod-autoscaler-fips, backup-restore-operator-fips, aws-otel-collector, coredns-fips, prometheus-node-exporter-fips, kubebuilder, mesosphere-vsphere-csi-fips, dex-fips, influxd, kyverno-policy-reporter-kyverno-plugin, flux-kustomize-controller, karma,...
[SECURITY] Fedora 43 Update: rust-oo7-cli-0.4.3-4.fc43
System keyring access from the terminal...
[SECURITY] Fedora 43 Update: rust-dua-cli-2.32.2-3.fc43
A tool to conveniently learn about the disk usage of directories, fast!...
GHSA-4255-C27H-62M5 unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)
The sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via JSON.stringify without sanitization, exposing secrets to shell history, CI/CD logs, and log...
Linux Distros Unpatched Vulnerability : CVE-2026-25918
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive...
CVE-2026-25918
unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...
CVE-2026-25918
unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...
CVE-2026-25918 unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)
unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...
CVE-2026-25918
The CVE concerns the unity-cli tool (specifically the sign-package command in the package @rage-against-the-pixel/unity-cli). Before version 1.8.2, when invoked with --verbose, the command logs sensitive credentials in plaintext by serializing CLI arguments (including --email and --password) with...
CVE-2026-25918
unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...
CVE-2026-25918 unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)
unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...
CVE-2026-25918 unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)
unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...
CVE-2026-25918: Insertion of Sensitive Information into Log File
unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...
unity-cli 日志信息泄露漏洞
unity-cli is a command-line utility for the Unity game engine, open-sourced by RageAgainstThePixel. Versions of unity-cli prior to 1.8.2 had a vulnerability related to log information leakage. This vulnerability stemmed from the sign-package command, which recorded sensitive credentials in plain...