CVE-2025-27023: Improper Input Validation

Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authenticated users to read all OS files via crafted CLI commands. Details: The web interface based management of the Infinera G42 appliance enables the feature of executing a restricted set of...

@kakashi-ventures-accelerator/catalyst-cli (0.1.0), @mew-protocol/mew (>=0.5.0, <=0.11.0) +1 more potentially affected by CVE-2025-53110 via @modelcontextprotocol/server-filesystem (0.6.2)

@modelcontextprotocol/server-filesystem NPM version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server-filesystem and may be impacted: - @kakashi-ventures-accelerator/catalyst-cli 0.1.0 - @mew-protocol/mew =0.5.0, =0.11....

Insertion Of Sensitive Information Into Log File

snyk is vulnerable to Insertion of Sensitive Information into Log File. The vulnerability is due to improper logging of sensitive data because of debug and trace log modes capturing container registry credentials, authentication tokens, and access tokens when certain CLI commands are executed...

@devsoutinho/alfred-currency-converter (>=2.0.0, <=2.1.1), @felixcatto/ui (>=0.0.14, <=0.0.32) +13 more potentially affected by CVE-2025-45143 via string-math (1.2.2)

string-math NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on string-math and may be impacted: - @devsoutinho/alfred-currency-converter =2.0.0, =0.0.14, =0.4.0-beta.2, =1.5.12, =0.1.47, =0.0.32, =2.0.0, =4.0.0, =1.0.0, =1.2.0, =1.0.8,...

Sensitive Data Exposure

Infinispan CLI is vulnerable to sensitive data exposure. The vulnerability is due to processing a Base64-decoded Kubernetes secret password in plaintext and including it in a command string, which may expose the data in error messages when a command is not found, allowing attackers to exploit thi...

CVE-2025-6624

Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when executing Snyk CLI in DEBUG or...

org.infinispan:infinispan-docs (15.1.7.final), org.infinispan:infinispan-quarkus-cli (15.1.7.final) +7 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.1.7.final)

org.infinispan:infinispan-cli-client MAVEN version 15.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-docs 15.1.7.final -...

org.infinispan:infinispan-server-integration (14.0.0.cr2), org.infinispan:infinispan-server-integrationtests-commons (14.0.0.cr2) +5 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (14.0.0.cr2)

org.infinispan:infinispan-cli-client MAVEN version 14.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 14.0.0.cr2 -...

org.infinispan:infinispan-server-integration (14.0.18.final), org.infinispan:infinispan-server-integrationtests-commons (14.0.18.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (14.0.18.final)

org.infinispan:infinispan-cli-client MAVEN version 14.0.18.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 14.0.18.final -...

org.infinispan:infinispan-persistence-cli (9.4.8.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (9.4.8.final)

org.infinispan:infinispan-cli-client MAVEN version 9.4.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 9.4.8.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-persistence-cli (9.1.6.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (9.1.6.final)

org.infinispan:infinispan-cli-client MAVEN version 9.1.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 9.1.6.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-server-integration (14.0.10.final), org.infinispan:infinispan-server-integrationtests-commons (14.0.10.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (14.0.10.final)

org.infinispan:infinispan-cli-client MAVEN version 14.0.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 14.0.10.final -...

org.infinispan:infinispan-server-integration (13.0.0.dev03), org.infinispan:infinispan-server-integrationtests-commons (13.0.0.dev03) +5 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (13.0.0.dev03)

org.infinispan:infinispan-cli-client MAVEN version 13.0.0.dev03 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 13.0.0.dev03 -...

org.infinispan:infinispan-persistence-cli (9.1.5.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (9.1.5.final)

org.infinispan:infinispan-cli-client MAVEN version 9.1.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 9.1.5.final Source cves: CVE-2025-5731...

io.quarkus:quarkus-test-infinispan-client (>=2.13.1.final, <=2.13.7.final), org.infinispan:infinispan-server-integration (13.0.11.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (13.0.11.final)

org.infinispan:infinispan-cli-client MAVEN version 13.0.11.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - io.quarkus:quarkus-test-infinispan-client =2.13.1.final, =2.13.7.final -...

org.infinispan:infinispan-persistence-cli (8.2.7.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (8.2.7.final)

org.infinispan:infinispan-cli-client MAVEN version 8.2.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 8.2.7.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-quarkus-cli (15.0.0.final), org.infinispan:infinispan-server-runtime (15.0.0.final) +3 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.0.0.final)

org.infinispan:infinispan-cli-client MAVEN version 15.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-quarkus-cli 15.0.0.final -...

org.infinispan:infinispan-server-runtime (12.1.0.cr2), org.infinispan:infinispan-server-testdriver-core (12.1.0.cr2) +4 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (12.1.0.cr2)

org.infinispan:infinispan-cli-client MAVEN version 12.1.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 12.1.0.cr2 -...

org.infinispan:infinispan-server-integration (13.0.0.dev02), org.infinispan:infinispan-server-integrationtests-commons (13.0.0.dev02) +5 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (13.0.0.dev02)

org.infinispan:infinispan-cli-client MAVEN version 13.0.0.dev02 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 13.0.0.dev02 -...

org.infinispan:infinispan-persistence-cli (9.0.2.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (9.0.2.final)

org.infinispan:infinispan-cli-client MAVEN version 9.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 9.0.2.final Source cves: CVE-2025-5731...