org.infinispan:infinispan-server-runtime (10.1.8.final), org.infinispan:infinispan-server-testdriver-core (10.1.8.final) +1 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.1.8.final)

org.infinispan:infinispan-cli-client MAVEN version 10.1.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.1.8.final -...

org.infinispan:infinispan-server-runtime (11.0.0.alpha) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (11.0.0.alpha)

org.infinispan:infinispan-cli-client MAVEN version 11.0.0.alpha is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 11.0.0.alpha Source cves: CVE-2025-5731...

org.infinispan:infinispan-server-runtime (11.0.0.dev05), org.infinispan:infinispan-server-testdriver-core (11.0.0.dev05) +1 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (11.0.0.dev05)

org.infinispan:infinispan-cli-client MAVEN version 11.0.0.dev05 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 11.0.0.dev05 -...

org.infinispan:infinispan-server-runtime (11.0.3.final), org.infinispan:infinispan-server-testdriver-core (11.0.3.final) +2 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (11.0.3.final)

org.infinispan:infinispan-cli-client MAVEN version 11.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 11.0.3.final -...

org.infinispan:infinispan-server-runtime (11.0.0.dev03), org.infinispan:infinispan-server-testdriver-core (11.0.0.dev03) +1 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (11.0.0.dev03)

org.infinispan:infinispan-cli-client MAVEN version 11.0.0.dev03 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 11.0.0.dev03 -...

CVE-2025-5731

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...

org.infinispan:infinispan-docs (>=15.0.14.final, <=15.0.16.final), org.infinispan:infinispan-quarkus-cli (>=15.0.0.cr1, <=15.0.16.final) +25 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (>=15.0.0.cr1, <=15.0.16.final)

org.infinispan:infinispan-cli-client MAVEN version =15.0.0.cr1, =15.0.14.final, =15.0.0.cr1, =15.0.4.final, =15.0.4.final, =15.0.0.cr1, =15.0.0.cr1, =15.0.0.cr1, =15.0.0.cr1, =15.0.4.final, =26.3.0, =26.1.0, =26.1.0, =26.1.0, =26.3.1 and more Source cves: CVE-2025-5731htt...

CVE-2025-5731

Summary: CVE-2025-5731 affects the Infinispan CLI, where a credential decoded from a Kubernetes secret is handled in plaintext and can appear in a command string, potentially leaking data in an error message when a command is not found. Root cause: insecure processing/embedding of the decoded sec...

CVE-2025-5731

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...

CVE-2025-5731 Infinispan: credential leakage in infinispan cli

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...

CVE-2025-5731 Infinispan: credential leakage in infinispan cli

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...

CVE-2025-5731

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found. Mitigation Currently, no mitigation is available for this...

Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode

Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when executing Snyk CLI in DEBUG or...

GHSA-6HWC-9H8R-3VMF Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode

Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when executing Snyk CLI in DEBUG or...

CVE-2025-6624

Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when executing Snyk CLI in DEBUG or...

CVE-2025-6624

Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when executing Snyk CLI in DEBUG or...

PT-2025-26934

Name of the Vulnerable Software and Affected Versions: snyk versions prior to 1.1297.3 Description: The issue allows for the insertion of sensitive information into log files through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line...

CVE-2025-6624: Insertion of Sensitive Information into Log File

Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when executing Snyk CLI in DEBUG or...

PT-2025-27013

Name of the Vulnerable Software and Affected Versions: Infinispan CLI affected versions not specified Description: A flaw was found in Infinispan CLI where a sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext. This password is included in a command stri...

CVE-2025-5731: Generation of Error Message Containing Sensitive Information

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...