neo-cli (>=0.8.2, <=0.9.3), temp-ssh (0.0.1) potentially affected by CVE-2026-59890 via setuptools (37.0.0)

setuptools PYPI version 37.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - neo-cli =0.8.2, =0.9.3 - temp-ssh 0.0.1 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

aitest-cli (>=0.0.7, <=0.0.9), geonode (4.4.5) potentially affected by CVE-2026-59890 via setuptools (63.0.0)

setuptools PYPI version 63.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aitest-cli =0.0.7, =0.0.9 - geonode 4.4.5 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

snowflake-cli-labs (3.0.0rc1) potentially affected by CVE-2026-59890 via setuptools (74.1.0)

setuptools PYPI version 74.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - snowflake-cli-labs 3.0.0rc1 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

vast-cli-fork (>=1.11.72, <=1.11.74) potentially affected by CVE-2026-59890 via setuptools (51.1.1)

setuptools PYPI version 51.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - vast-cli-fork =1.11.72, =1.11.74 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

goyabu-cli (>=1.0.7, <=1.0.15) potentially affected by CVE-2026-59890 via setuptools (64.0.1)

setuptools PYPI version 64.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - goyabu-cli =1.0.7, =1.0.15 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

Malicious code in visa-cli-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e8f566e285de1eec2c3cae07b0faaa8828080a4e1fed7e76e1fe43dfa571ec Package presents as an internal-looking corporate tooling name 'visa-cli-tools' published at an inflated version 99.9.1 — the canonical...

MAL-2026-7005 Malicious code in visa-cli-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e8f566e285de1eec2c3cae07b0faaa8828080a4e1fed7e76e1fe43dfa571ec Package presents as an internal-looking corporate tooling name 'visa-cli-tools' published at an inflated version 99.9.1 — the canonical...

CVE-2026-39835 affecting package cf-cli for versions less than 8.7.11-7

CVE-2026-39835 affecting package cf-cli for versions less than 8.7.11-7. A patched version of the package is available...

CVE-2026-39827 affecting package cf-cli for versions less than 8.7.11-7

CVE-2026-39827 affecting package cf-cli for versions less than 8.7.11-7. A patched version of the package is available...

CVE-2026-39828 affecting package cf-cli for versions less than 8.7.11-7

CVE-2026-39828 affecting package cf-cli for versions less than 8.7.11-7. A patched version of the package is available...

CVE-2026-25680 affecting package cf-cli for versions less than 8.7.11-7

CVE-2026-25680 affecting package cf-cli for versions less than 8.7.11-7. A patched version of the package is available...

PAN-OS: Authenticated Command Injection in CLI

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of...

Important: Red Hat Security Advisory: RHTAS 1.4.2 - CLI Stack Release

The 1.4.2 release of the RHTAS CLIs. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS CLI Stack images for RHTAS 1.4.2...

MAL-2026-6984 Malicious code in @vite-ln/build-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8972bbfdd55ad200dd49b08501d7391beca99841f0c36479806f2b1e329950a2 Package @vite-ln/build-ts copies the legitimate vite package's manifest verbatim description 'Native-ESM powered web dev build tool', author 'Evan...

PT-2026-56586

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 12.1.8 PAN-OS versions prior to 11.2.13 PAN-OS versions prior to 11.1.16 PAN-OS versions prior to 10.2.18-h8 Description A command injection issue exists in the management plane of the software, specifically within the...

CVE-2026-55849: Improper Neutralization of Special Elements used in an OS Command

@cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. From 2.1.0 before 5.0.0, the CLI passes user-supplied --workspace values to a subshell without proper sanitization when npmexecpath is unset or empty, allowing arbitrary OS command execution with the privileg...

CVE-2026-47828 - Missing TLS Certificate Verification in BOSH CLI Allows Root Code Execution via Man-in-the-Middle Credential Replay | Cloud Foundry

CVSS Score: High 8.9 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSSv3: High 7.1 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Vendor BOSH-Ecosystem / BOSH bosh-cli Versions Affected Severity is High unless otherwise noted. bosh-cli – All versions prior to v7.10.4 Description...

CVE-2026-47826 - blobs.yaml Path Traversal Allows File Writes | Cloud Foundry

HIGH CVSSv4: High 8.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSSv3: High 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Vendor CloudFoundry Foundation Versions Affected Severity is HIGH unless otherwise noted. BOSH CLI tool – All versions prior to v7.10.4 Description T...

CVE-2026-46672 Actual: CSV Formula Injection in `@actual-app/cli` `--format csv` Output via Custom `escapeCsv` Helper

Actual is a local-first personal finance app. Prior to 26.6.0, @actual-app/cli ships a hand-rolled CSV serializer in packages/cli/src/output.ts used whenever the global --format csv option is passed, whose escapeCsv helper only handles RFC 4180 delimiter, quote, and newline escaping and does not...

mold-cli (>=0.0.1, <=0.0.2), pygrest (1.1.0) +3 more potentially affected by CVE-2025-71176 via pytest (4.1.1)

pytest PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - mold-cli =0.0.1, =1.0.0, =0.100.2rc4, =0.100.2 - regexgen 1.0.0 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...