agentstack-cli (>=0.5.0rc4, <=0.6.1), artifact-ddd (>=0.0.1, <=0.0.3) +144 more potentially affected by CVE-2026-26007 via cryptography (>=46.0.0, <=46.0.4)

cryptography PYPI version =46.0.0, =0.5.0rc4, =0.0.1, =0.13.12, =3.8.9, =0.2.50, =0.7.0, =3.0.0a1, =0.4.6, =1.1.56, =1.0.3, =4.7.0, =1.28.0rc1, =1.29.0 and more Source cves: CVE-2026-26007 Source advisory: GHSA-R6PH-V2QM-Q3C2...

airflow-run (0.4.9), ais-dom (>=0.117.0b0, <=2021.2.4) +49 more potentially affected by CVE-2026-26007 via cryptography (3.2.0)

cryptography PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - airflow-run 0.4.9 - ais-dom =0.117.0b0, =2.0.1.dev14, =2.0.2 - azureml-accel-models 1.23.0 - azureml-cli-common 1.23.0 -...

agentstack-cli (>=0.5.0rc4, <=0.6.1), artifact-ddd (>=0.0.1, <=0.0.3) +144 more potentially affected by CVE-2026-26007 via cryptography (>=46.0.0, <=46.0.4)

cryptography PYPI version =46.0.0, =0.5.0rc4, =0.0.1, =0.13.12, =3.8.9, =0.2.50, =0.7.0, =3.0.0a1, =0.4.6, =1.1.56, =1.0.3, =4.7.0, =1.28.0rc1, =1.29.0 and more Source cves: CVE-2026-26007 Source advisory: OSV:GHSA-R6PH-V2QM-Q3C2...

biweeklybudget (>=0.1.0, <=0.7.0), crossbar (17.3.1) +6 more potentially affected by CVE-2026-26007 via cryptography (1.8.1)

cryptography PYPI version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - biweeklybudget =0.1.0, =1.6.0, =1.1.2, =2.2.0, =0.3.4, =0.3.5 - typtop 0.2.11 Source cves: CVE-2026-26007 Source advisory:...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, node-feature-discovery, gptscript, pulumi-kubernetes-operator, git-lfs, opentofu, nri-haproxy, hello-world-golang, runc, crossplane-provider-azure-sql, opa, regclient, dask-gateway, petname, nova, jitsucom-bulker, age, vertical-pod-autoscaler,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, node-feature-discovery, gptscript, pulumi-kubernetes-operator, git-lfs, opentofu, nri-haproxy, runc, crossplane-provider-azure-sql, opa, regclient, dask-gateway, nova, jitsucom-bulker, vertical-pod-autoscaler, azuredisk-csi, portieris,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, mcp-grafana, stakater-reloader, frp, ksops, ucd, cadvisor, karpenter-fips, terraform-mcp-server, kind, k8ssandra-client-fips, kubernetes-dashboard-api-fips, kubernetes-event-exporter-fips, amazon-ecs-cni-plugins-fips, hydra-fips, consul-fips,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, mcp-grafana, stakater-reloader, frp, ksops, ucd, cadvisor, karpenter-fips, terraform-mcp-server, kind, k8ssandra-client-fips, kubernetes-dashboard-api-fips, kubernetes-event-exporter-fips, amazon-ecs-cni-plugins-fips, hydra-fips, consul-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, mcp-grafana, stakater-reloader, frp, ksops, ucd, cadvisor, karpenter-fips, terraform-mcp-server, kind, k8ssandra-client-fips, kubernetes-dashboard-api-fips, kubernetes-event-exporter-fips, amazon-ecs-cni-plugins-fips, hydra-fips, consul-fips,...

[SECURITY] Fedora 43 Update: rust-oo7-cli-0.4.3-4.fc43

System keyring access from the terminal...

[SECURITY] Fedora 43 Update: rust-dua-cli-2.32.2-3.fc43

A tool to conveniently learn about the disk usage of directories, fast!...

GHSA-4255-C27H-62M5 unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)

The sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via JSON.stringify without sanitization, exposing secrets to shell history, CI/CD logs, and log...

Linux Distros Unpatched Vulnerability : CVE-2026-25918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive...

CVE-2026-25918

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...

CVE-2026-25918

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...

CVE-2026-25918 unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...

CVE-2026-25918

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...

CVE-2026-25918 unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...

CVE-2026-25918 unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...

CVE-2026-25918

The CVE concerns the unity-cli tool (specifically the sign-package command in the package @rage-against-the-pixel/unity-cli). Before version 1.8.2, when invoked with --verbose, the command logs sensitive credentials in plaintext by serializing CLI arguments (including --email and --password) with...