CVE-2022-2225

By using warp-cli subcommands disable-ethernet, disable-wifi, it was possible for a user without admin privileges to bypass configured Zero Trust security policies e.g. Secure Web Gateway policies and features such as 'Lock WARP switch'...

CVE-2022-20775

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted...

CVE-2022-39327

Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting machine runs an Azure CLI command where parameter values have been provided by an external source. T...

CVE-2024-52308

The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using gh codespace ssh or gh codespace logs commands. This has been patched in the cli v2.62.0. Developers connect to remote codespaces through an SSH server running with...

CVE-2024-20326

A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system. This vulnerability is due to improper authorization enforcement whe...

CVE-2024-20398

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write file system access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI...

CVE-2024-20389

A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system. This vulnerability is due to improper authorization enforcement whe...

CVE-2024-31474

There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI Aruba's Access Point management protocol. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to...

CVE-2024-31467

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's Access Point management protocol UDP port 8211. Successful exploitation of these vulnerabilities resul...

PT-2025-5772 · Cli-Util · Cli-Util

Name of the Vulnerable Software and Affected Versions: cli-util version 1.1.27 Description: A prototype pollution in the lib.merge function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For version 1.1.27, consider disabling the lib.merge...

CVE-2024-57078

The cli-util utility (version v1.1.27 ), part of the cli-kit toolkit, contains a prototype pollution vulnerability in the lib.merge function. An attacker can exploit this by supplying a crafted payload to cause a Denial of Service (DoS) . As a temporary workaround, it is recommended to disable th...

CVE-2024-57078

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57078

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

@aorticweb/truffle-plugin-gobind (1.0.1), @atlantiswap/smart-order-router (>=0.0.2, <=0.0.6) +159 more potentially affected by CVE-2024-57078 via cli-util (>=1.0.9, <=1.1.27)

cli-util NPM version =1.0.9, =0.0.2, =2.2.0, =0.5.31, =0.0.1, =0.0.2, =0.1.0, =0.6.8, =0.0.3, =1.0.0, =0.1.7, =0.6.1, =0.5.20, =2.5.9, =1.0.5, =1.0.7 and more Source cves: CVE-2024-57078 Source advisory: MEND:CVE-2024-57078...

CVE-2024-57078

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57078: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

cli-util security vulnerability

cli-util is a utility function of the cli toolkit open source by cli-kit. A security vulnerability exists in cli-util version v1.1.27, which stems from the lib.merge function containing a prototype contamination vulnerability...

CVE-2024-48964

The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning...

CVE-2024-48963

The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning truste...

MAL-2025-1215 Malicious code in drift-v1-cli (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc8e83d9fff21b8fd67210fa3db37e1aec46e02dc3da9b43ebbc8ce199d20723 Any computer that has this package installed or running should be considered...