CVE-2026-59831

GitHub CLI gh is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopbac...

CVE-2026-59831 GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace

GitHub CLI gh is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopbac...

CVE-2026-59831 GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace

GitHub CLI gh is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopbac...

CVE-2026-33802 Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated attacker to cause a Denial-of-Service DoS. On EX2300, EX4000, EX4100, EX4300-MP Multigigabit and EX4400 switches, an authenticated, local attacker with no specific permissions ...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: prometheus, containerd, prometheus-operator-fips, prometheus-fips, net-kourier-fips, grafana-operator, kubernetes-csi-node-driver-registrar-fips, jaeger-fips, azure-aad-pod-identity-mic, redka, karpenter-fips, elastic-agent, prometheus-operator, keda-fips, langfuse,...

@mockoon/cli (>=9.0.0, <=9.6.1), @mockoon/serverless (>=9.0.0, <=9.6.1) +2 more potentially affected by CVE-2026-59148 via @mockoon/commons-server (>=9.0.0, <=9.6.1)

@mockoon/commons-server NPM version =9.0.0, =9.0.0, =9.0.0, =0.0.1, =0.30.0, =0.40.0 Source cves: CVE-2026-59148 Source advisory: SNYK:JS-MOCKOONCOMMONSSERVER-17957231...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: argo-cd, cert-manager, karpenter, melange, dataplaneapi, pulumi-language-dotnet, traefik, dask-gateway, zarf, kine, cerbos, buildkitd, containerd, loki, cilium-cli, kubeflow-katib, scorecard, pinact, src, falco-no-driver, opentofu, apko, grafana-alloy,...

CVE-2026-0286 PAN-OS: Authenticated Command Injection in CLI

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of...

CVE-2026-0286

Summary: CVE-2026-0286 is a command-injection vulnerability in the PAN-OS management plane. An authenticated administrator can execute arbitrary OS commands as root, via the CLI. The flaw affects PAN-OS on PA-Series and VM-Series firewalls and Panorama (virtual and M-Series); Cloud NGFW and Prism...

PYSEC-2026-3125 Code injection in `saved_model_cli` in TensorFlow

Impact TensorFlow's savedmodelcli tool is vulnerable to a code injection: savedmodelcli run --inputexprs 'x=print"malicious code to run"' --dir ./ --tagset serve --signaturedef servingdefault This can be used to open a reverse shell savedmodelcli run --inputexprs 'hello=exec"""\nimport...

Code injection in `saved_model_cli` in TensorFlow

ImpactTensorFlow's savedmodelcli tool is vulnerable to a code injection:savedmodelcli run --inputexprs 'x=print"malicious code to run"' --dir ./--tagset serve --signaturedef servingdefaultThis can be used to open a reverse shell savedmodelcli run --inputexprs 'hello=exec"""\nimport...

Code injection in `saved_model_cli` in TensorFlow

ImpactTensorFlow's savedmodelcli tool is vulnerable to a code injection:savedmodelcli run --inputexprs 'x=print"malicious code to run"' --dir ./--tagset serve --signaturedef servingdefaultThis can be used to open a reverse shell savedmodelcli run --inputexprs 'hello=exec"""\nimport...

PYSEC-2026-3289 Code injection in `saved_model_cli` in TensorFlow

Impact TensorFlow's savedmodelcli tool is vulnerable to a code injection: savedmodelcli run --inputexprs 'x=print"malicious code to run"' --dir ./ --tagset serve --signaturedef servingdefault This can be used to open a reverse shell savedmodelcli run --inputexprs 'hello=exec"""\nimport...

io.micronaut.security:micronaut-security-oauth2 (>=2.4.0, <=2.4.3), io.micronaut.starter:micronaut-micronaut-cli (2.4.0) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.4.0)

io.micronaut:micronaut-http-client MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.security:micronaut-security-oauth2 =2.4.0, =2.4.3 -...

io.micronaut.starter:micronaut-micronaut-cli (2.2.1), io.micronaut.starter:micronaut-starter-api (2.2.1) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.2.1)

io.micronaut:micronaut-http-client MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.starter:micronaut-micronaut-cli 2.2.1 -...

io.micronaut.kubernetes:micronaut-kubernetes-discovery-client (>=2.3.0, <=2.3.4), io.micronaut.starter:micronaut-micronaut-cli (2.3.3) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.3.3)

io.micronaut:micronaut-http-client MAVEN version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.kubernetes:micronaut-kubernetes-discovery-client =2.3.0, =2.3.4 -...

io.micronaut.starter:micronaut-micronaut-cli (2.3.0), io.micronaut.starter:micronaut-starter-api (2.3.0) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.3.0)

io.micronaut:micronaut-http-client MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.starter:micronaut-micronaut-cli 2.3.0 -...

fr.cnieg.demo:demo (>=4.0.1, <=4.0.3), io.micronaut.starter:micronaut-micronaut-cli (2.2.2) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.2.2)

io.micronaut:micronaut-http-client MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - fr.cnieg.demo:demo =4.0.1, =4.0.3 - io.micronaut.starter:micronaut-micronaut-cli 2.2.2 -...

com.github.goodforgod:micronaut-clickhouse (2.2.0), io.eventuate.messaging.http:eventuate-tram-consumer-http-micronaut (>=0.3.0.release, <=0.9.0.release) +6 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.4.1)

io.micronaut:micronaut-http-client MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - com.github.goodforgod:micronaut-clickhouse 2.2.0 -...

io.micronaut.starter:micronaut-micronaut-cli (2.4.3), io.micronaut.starter:micronaut-starter-api (2.4.3) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.4.3)

io.micronaut:micronaut-http-client MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.starter:micronaut-micronaut-cli 2.4.3 -...