luis-reddit-cli (1.0.0), md-links-larissadepaula (>=0.2.0, <=0.2.1) +1 more potentially affected by unknown CVE via node-fecth (0.0.1-security)

node-fecth NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-fecth and may be impacted: - luis-reddit-cli 1.0.0 - md-links-larissadepaula =0.2.0, =0.0.37, =0.0.40 Source cves: unknown CVE Source advisory: OSV:MAL-2025-2761...

MAL-2025-39082 Malicious code in wepack-cli (npm)

The package wepack-cli was found to contain malicious code...

MAL-2025-17112 Malicious code in cli-plugin-graphql (npm)

The package cli-plugin-graphql was found to contain malicious code...

MAL-2025-17107 Malicious code in cli-hydrogen (npm)

The package cli-hydrogen was found to contain malicious code...

MAL-2025-31878 Malicious code in read-cli-input (npm)

The package read-cli-input was found to contain malicious code...

MAL-2025-13975 Malicious code in accelerate-cli (npm)

The package accelerate-cli was found to contain malicious code...

MAL-2025-21060 Malicious code in fusion-dev-cli (npm)

The package fusion-dev-cli was found to contain malicious code...

MAL-2025-22078 Malicious code in h1-cli-device-node (npm)

The package h1-cli-device-node was found to contain malicious code...

MAL-2025-15912 Malicious code in bnrn-cli-snapshot (npm)

The package bnrn-cli-snapshot was found to contain malicious code...

MAL-2025-17109 Malicious code in cli-janus-norma-lightyear (npm)

The package cli-janus-norma-lightyear was found to contain malicious code...

MAL-2025-21410 Malicious code in gifhorse-cli (npm)

The package gifhorse-cli was found to contain malicious code...

MAL-2025-17106 Malicious code in cli-h2-test (npm)

The package cli-h2-test was found to contain malicious code...

Malicious code in bulma-dione-celeste-cli (npm)

The package bulma-dione-celeste-cli was found to contain malicious code...

CVE-2025-20220

A vulnerability in the CLI of Cisco Secure Firewall Management Center FMC Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability is due to improper inp...

Malicious code in st-py-de-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a0110859887f6cd8d6e81ff1c6715dd4a5d2a1c84c28b71cb09320e33e10cce5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-41768 Malicious code in st-py-de-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a0110859887f6cd8d6e81ff1c6715dd4a5d2a1c84c28b71cb09320e33e10cce5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2025-55345

CVE-2025-55345 concerns OpenAI Codex CLI when used in a restricted workspace-write sandbox. The issue arises because symlinks are followed outside the allowed current working directory in a malicious context (repo/directory), enabling arbitrary file overwrite and potentially remote code execution...

CVE-2025-55345 Unsafe symlink following in restricted workspace-write sandbox leads to RCE

Using Codex CLI in workspace-write mode inside a malicious context repo, directory, etc could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory...

PT-2025-32971 · Codex Cli · Codex Cli

Name of the Vulnerable Software and Affected Versions: Codex CLI affected versions not specified Description: Using Codex CLI in workspace-write mode within a malicious context repository, directory, etc. may lead to arbitrary file overwrite and potentially remote code execution. This occurs...

SUSE SLES15 / openSUSE 15 Security Update : amber-cli (SUSE-SU-2025:02769-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02769-1 advisory. - Update to version 1.13.1+git20250329.c2e3bb8: CVE-2025-30204: Fixed jwt-go excessive memory allocation during header parsin...