AWS CLI cli_history DoS

The vulnerability of the clihistory parameter in the AWS CLI command line tool, which is used to interact with Amazon Web Services, is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

ara-cli (>=0.1.14.13, <=0.1.14.14), clai (>=1.56.0, <=1.101.0) +23 more potentially affected by CVE-2026-48782 via pydantic-ai (>=1.56.0, <=1.101.0)

pydantic-ai PYPI version =1.56.0, =0.1.14.13, =1.56.0, =1.0.0, =0.1.102, =26.1.0, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =26.1.0rc1, =0.9.1, =0.1.0rc6, =1.2.0, =1.4.0 and more Source cves: CVE-2026-48782 Source advisory: MEND:CVE-2026-48782...

ethos-cli (0.1.0), flowsets (0.0.9) +4 more potentially affected by CVE-2026-50574 via yt-dlp (2025.1.26)

yt-dlp PYPI version 2025.1.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ethos-cli 0.1.0 - flowsets 0.0.9 - rvc-cli =1.1.0, =0.11.8, =2025.1.28, =2025.2.17 Source cves: CVE-2026-50574 Source advisory:...

ethos-cli (0.1.0), flowsets (0.0.9) +4 more potentially affected by CVE-2026-50023 via yt-dlp (2025.1.26)

yt-dlp PYPI version 2025.1.26 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - ethos-cli 0.1.0 - flowsets 0.0.9 - rvc-cli =1.1.0, =0.11.8, =2025.1.28, =2025.2.17 Source cves: CVE-2026-50023 Source advisory:...

Important: Red Hat Security Advisory: Helm CLI v4.1.4 release

General availability release of Helm CLI v4.1.4. Helm is the package manager for Kubernetes, used to define, install, and upgrade applications as reusable charts. This release delivers the Helm v4.1.4 binaries built and distributed by Red Hat...

Malicious code in stripe-cli-init-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05bd1dbc9732ef80aca27acad964c041b74e646e26cf4947ad34807c41d2c4a8 Package name 'stripe-cli-init-plugin' impersonates the Stripe CLI ecosystem and ships a bin script bin/run.js that, when invoked via npx...

MAL-2026-5899 Malicious code in stripe-cli-init-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05bd1dbc9732ef80aca27acad964c041b74e646e26cf4947ad34807c41d2c4a8 Package name 'stripe-cli-init-plugin' impersonates the Stripe CLI ecosystem and ships a bin script bin/run.js that, when invoked via npx...

langchain-cli (>=0.0.1, <=0.0.2), langchain-sap-llm (0.1.1) +1 more potentially affected by CVE-2026-55443 via langchain (0.0.139)

langchain PYPI version 0.0.139 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - langchain-cli =0.0.1, =0.0.5, =0.0.6 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

alita-sdk (>=0.0.1, <=0.0.16), code-agent (>=0.2.0.0, <=0.3.0.1) +9 more potentially affected by CVE-2026-55443 via langchain (0.1.11)

langchain PYPI version 0.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - alita-sdk =0.0.1, =0.2.0.0, =0.0.10, =0.0.2, =0.0.0, =0.1.0, =0.0.0, =0.10.4, =0.11.1 - wolfcode 0.1.0 Source cves: CVE-2026-55443 Source...

baicai-base (0.1.2), baicai-tutor (0.1.0) +7 more potentially affected by CVE-2026-55443 via langchain (0.3.24)

langchain PYPI version 0.3.24 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - baicai-base 0.1.2 - baicai-tutor 0.1.0 - cneura-ai =0.1.1, =0.1.12, =0.4.7, =0.1.13, =0.1.0, =1.4.10 - ragbuilder 0.1.6 - spart-prompt 1.0.0...

pdd-cli (>=0.0.18, <=0.0.21), structured-sql-agent (0.1.0) potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.8)

langchain-anthropic PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - pdd-cli =0.0.18, =0.0.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

adhoc-api (>=2.1.0, <=2.6.1), archytas (>=1.3.14, <=1.4.5) +6 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.12)

langchain-anthropic PYPI version 0.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - adhoc-api =2.1.0, =1.3.14, =1.8.0, =0.10.0, =0.4.7, =1.2.0, =1.4.10 Source cves: CVE-2026-55443 Source advisory:...

bugbug (>=0.0.594, <=0.0.595), testrigor-codecake-cli (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.20)

langchain-anthropic PYPI version 0.3.20 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - bugbug =0.0.594, =0.1.0, =0.1.2 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

acp-cli (>=0.0.1, <=0.0.804), ads4gpts-langgraph-agent (>=0.1.1, <=0.1.10) +78 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.22)

langchain-anthropic PYPI version 0.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - acp-cli =0.0.1, =0.1.1, =0.0.805, =0.1.3, =0.1.0, =0.1.0a2, =0.1.0, =0.0.38rc83, =0.2.3, =1.3.0, =5.2.161, =5.8.141 and...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-54531 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-54531 Source advisory: OSV:GHSA-M2V9-299J-RV96...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-54530 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-54530 Source advisory: OSV:GHSA-52X6-GQ3R-VPF4...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-49461 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-49461 Source advisory: OSV:GHSA-J543-4VMF-QM7V...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-49460 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-49460 Source advisory: OSV:GHSA-5HGR-HG42-57JG...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-48735 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-48735 Source advisory: OSV:GHSA-WJQC-6W8F-H24C...

Command Injection

Overview browserstack-cypress-cli is a BrowserStack Cypress CLI for Cypress integration with BrowserStack's remote devices. Affected versions of this package are vulnerable to Command Injection via the loadJsFile process in readCypressConfigUtil. An attacker can execute arbitrary commands by...