8804 matches found
DEBIAN-CVE-2025-54364
Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. optiondescriptions employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings containing a...
DEBIAN-CVE-2025-54363
Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. extractfullsummaryfromsignature employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings...
UBUNTU-CVE-2025-54363
Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. extractfullsummaryfromsignature employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings...
mcp-cli 安全漏洞
mcp-cli is a model context protocol checker for Wong2 Personal Developer. A security vulnerability exists in mcp-cli version 1.13.0, which stems from an incorrect operation of the function redirectToAuthorization in the file /src/oauth/provider.js resulting in os command injection...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: k9s, zarf, kubescape, opentofu, trivy, tflint, grype, zot, terragrunt, tfsec, terraform, wolfictl, syft, kots, snyk-cli, xeol, rancher-fleet, conftest, trivy-operator, steampipe...
GHSA-WJRX-6529-HCJ3 vulnerabilities
Vulnerabilities for packages: k9s, zarf, kubescape, opentofu, trivy, tflint, grype, zot, terragrunt, tfsec, terraform, wolfictl, syft, kots, snyk-cli, xeol, rancher-fleet, conftest, trivy-operator, steampipe...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: terraform-fips, opentofu, k9s-fips, kubescape, snyk-cli, trivy-fips, trivy-operator-fips, xeol-fips, cloudbeat-fips, rancher-fleet, zot, tflint, grype-fips, grype, grype-db, terraform, syft, wolfictl, zarf, rancher-fleet-fips, steampipe, xeol, conftest-fips, chainctl...
Malicious Package
Overview meid-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in meid-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54a1eca3fe980472cd2c418bc50f361595c86cc248665cdf8e01129e7af96f66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in avalon-util-cli (npm)
The package avalon-util-cli was found to contain malicious code...
Malicious code in wepack-cli (npm)
The package wepack-cli was found to contain malicious code...
Malicious code in respace-cli (npm)
The package respace-cli was found to contain malicious code...
Malicious code in polaris-cli (npm)
The package polaris-cli was found to contain malicious code...
Malicious code in avalon-cli-create (npm)
The package avalon-cli-create was found to contain malicious code...
Malicious code in subtitles-cli (npm)
The package subtitles-cli was found to contain malicious code...
Malicious code in cli-configs (npm)
The package cli-configs was found to contain malicious code...
Malicious code in avalon-cli-run-ios (npm)
The package avalon-cli-run-ios was found to contain malicious code...
Malicious code in read-cli-input (npm)
The package read-cli-input was found to contain malicious code...