jo-cli (1.0.2) potentially affected by CVE-2026-69152 via brace-expansion (3.0.0)

brace-expansion NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on brace-expansion and may be impacted: - jo-cli 1.0.2 Source cves: CVE-2026-69152 Source advisory: OSV:GHSA-RGW5-RVV9-X895...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, zipkin, keycloak-config-cli...

CVE-2026-41850 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, zipkin, keycloak-config-cli...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, zipkin, keycloak-config-cli...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, zipkin, keycloak-config-cli...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, zipkin, keycloak-config-cli...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, zipkin, keycloak-config-cli...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, zipkin, keycloak-config-cli...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: apache-activemq, keycloak-config-cli, apache-camel-karavan-devmode, apache-nifi-registry, zipkin, camunda, apache-activemq-fips, jenkins, kafbat-ui-fips, kafbat-ui, camunda-zeebe...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: apache-activemq, keycloak-config-cli, apache-camel-karavan-devmode, apache-nifi-registry, zipkin, camunda, apache-activemq-fips, jenkins, kafbat-ui-fips, kafbat-ui, camunda-zeebe...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: apache-activemq, keycloak-config-cli, apache-camel-karavan-devmode, apache-nifi-registry, zipkin, camunda, apache-activemq-fips, jenkins, kafbat-ui-fips, kafbat-ui, camunda-zeebe...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: apache-activemq, keycloak-config-cli, apache-camel-karavan-devmode, apache-nifi-registry, zipkin, camunda, apache-activemq-fips, jenkins, kafbat-ui-fips, kafbat-ui, camunda-zeebe...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: apache-activemq, keycloak-config-cli, apache-camel-karavan-devmode, apache-nifi-registry, zipkin, camunda, apache-activemq-fips, jenkins, kafbat-ui-fips, kafbat-ui, camunda-zeebe...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: apache-activemq, keycloak-config-cli, apache-camel-karavan-devmode, apache-nifi-registry, zipkin, camunda, apache-activemq-fips, jenkins, kafbat-ui-fips, kafbat-ui, camunda-zeebe...

CVE-2026-25552

The CVE-2026-25552 entry concerns Ghost CLI before 1.30.1, where an IP spoofing vulnerability allows unauthenticated remote attackers to bypass rate-limiting on self-hosted Ghost instances. The underlying issue is misusing the X-Forwarded-For header in combination with a misconfigured Nginx setup...

EUVD-2026-51595

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

CVE-2026-25552 Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

CVE-2026-25552 Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

OPENSUSE-SU-2026:11410-1 cf-cli-8.18.4+git.0.3fcd823a1-1.1 on GA media

These are all security issues fixed in the cf-cli-8.18.4+git.0.3fcd823a1-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2026-11349 Malicious code in pretty-log-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad32145cb24ae2a271cecb6379d30a531be17d84a0d71189d3a4afaec20af015 No malicious behavior was identified in this package version. There is no evidence of credential access, environment scraping, network exfiltration,...