alvin-cli (>=1.3.0rc1, <=1.3.0), openmetadata-sqllineage (>=1.1.0.2, <=1.1.0.3) +1 more potentially affected by CVE-2026-46373 via sqlfluff (2.1.2)

sqlfluff PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli =1.3.0rc1, =1.1.0.2, =1.1.0.3 - sqlfluff-templater-dbt 2.1.2 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

odd-cli (>=0.1.1, <=0.1.10), odd-collector-sdk (>=0.2.4, <=0.3.56) +4 more potentially affected by CVE-2026-46373 via sqlfluff (3.0.3)

sqlfluff PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - odd-cli =0.1.1, =0.2.4, =0.2.3, =2.0.32, =2.0.46 - sqlfluff-templater-dbt 3.0.3 - sqllineage 1.5.2 Source cves: CVE-2026-46373 Source advisory:...

dbt-coves (>=0.21.0a2, <=0.21.0a16), dwhgen (0.1.0) +1 more potentially affected by CVE-2026-46374 via sqlfluff (0.7.1)

sqlfluff PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.21.0a2, =0.1.0, =0.14.0 Source cves: CVE-2026-46374 Source advisory: OSV:PYSEC-2026-210...

alvin-cli (0.0.1a0) potentially affected by CVE-2026-46373 via sqlfluff (0.12.0)

sqlfluff PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli 0.0.1a0 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

alvin-cli (>=1.3.0rc1, <=1.3.0), openmetadata-sqllineage (>=1.1.0.2, <=1.1.0.3) +1 more potentially affected by CVE-2026-46374 via sqlfluff (2.1.2)

sqlfluff PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli =1.3.0rc1, =1.1.0.2, =1.1.0.3 - sqlfluff-templater-dbt 2.1.2 Source cves: CVE-2026-46374 Source advisory: OSV:PYSEC-2026-210...

odd-cli (>=0.1.1, <=0.1.10), odd-collector-sdk (>=0.2.4, <=0.3.56) +4 more potentially affected by CVE-2026-46374 via sqlfluff (3.0.3)

sqlfluff PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - odd-cli =0.1.1, =0.2.4, =0.2.3, =2.0.32, =2.0.46 - sqlfluff-templater-dbt 3.0.3 - sqllineage 1.5.2 Source cves: CVE-2026-46374 Source advisory:...

alvin-cli (0.0.1a0) potentially affected by CVE-2026-46374 via sqlfluff (0.12.0)

sqlfluff PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli 0.0.1a0 Source cves: CVE-2026-46374 Source advisory: OSV:PYSEC-2026-210...

alvin-cli (>=0.2.0, <=1.2.0rc14) potentially affected by CVE-2026-46373 via sqlfluff (0.13.0)

sqlfluff PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli =0.2.0, =1.2.0rc14 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

alvin-cli (>=0.2.0, <=1.2.0rc14) potentially affected by CVE-2026-46374 via sqlfluff (0.13.0)

sqlfluff PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - alvin-cli =0.2.0, =1.2.0rc14 Source cves: CVE-2026-46374 Source advisory: OSV:PYSEC-2026-210...

dbt-coves (>=0.21.0a2, <=0.21.0a16), dwhgen (0.1.0) +1 more potentially affected by CVE-2026-46373 via sqlfluff (0.7.1)

sqlfluff PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.21.0a2, =0.1.0, =0.14.0 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

EUVD-2025-210085

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability CWE-1244 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiPro...

Malicious Package

Overview progerss-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in progerss-cli (npm)

progerss-cli is a typosquat of the popular cli-progress package that ships an obfuscated payload executed automatically on install. The package borrows trust from its victim: repository.url is set to https://github.com/npkgz/cli-progress — the legitimate cli-progress project's own repository — an...

MAL-2026-5343 Malicious code in progerss-cli (npm)

progerss-cli is a typosquat of the popular cli-progress package that ships an obfuscated payload executed automatically on install. The package borrows trust from its victim: repository.url is set to https://github.com/npkgz/cli-progress — the legitimate cli-progress project's own repository — an...

CVE-2026-52902

CVE-2026-52902 affects awxkit (AWX CLI). The YAML !include directive permits path traversal, enabling an attacker to craft a YAML file that reads arbitrary local YAML files when a user imports it via awx --conf.format yaml import. This is a client-side vulnerability requiring user interaction. Mi...

Restricted CLI escape using Lua

...

CVE-2025-67862: Internal Asset Exposed to Unsafe Debug Access Level or State

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability CWE-1244 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiPro...

Fortinet Fortigate Restricted CLI escape using Lua (FG-IR-26-143)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-143 advisory. - An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability CWE-1244 vulnerability in Fortinet FortiOS...

Malicious code in solana-cli-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ee640ddeeacc31a125ec0fcc11dcb5f9a23e18f5ed003ce2dfcb1de8bbe1dd On import solanaclipy, the package's top-level init.py unconditionally invokes report, which harvests standard developer-side secret material and POS...

MAL-2026-5336 Malicious code in solana-cli-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ee640ddeeacc31a125ec0fcc11dcb5f9a23e18f5ed003ce2dfcb1de8bbe1dd On import solanaclipy, the package's top-level init.py unconditionally invokes report, which harvests standard developer-side secret material and POS...