agentstack-cli (>=0.5.0rc4, <=0.6.1), artifact-ddd (>=0.0.1, <=0.0.3) +144 more potentially affected by CVE-2026-26007 via cryptography (>=46.0.0, <=46.0.4)

cryptography PYPI version =46.0.0, =0.5.0rc4, =0.0.1, =0.13.12, =3.8.9, =0.2.50, =0.7.0, =3.0.0a1, =0.4.6, =1.1.56, =1.0.3, =4.7.0, =1.28.0rc1, =1.29.0 and more Source cves: CVE-2026-26007 Source advisory: GHSA-R6PH-V2QM-Q3C2...

airflow-run (0.4.9), ais-dom (>=0.117.0b0, <=2021.2.4) +49 more potentially affected by CVE-2026-26007 via cryptography (3.2.0)

cryptography PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - airflow-run 0.4.9 - ais-dom =0.117.0b0, =2.0.1.dev14, =2.0.2 - azureml-accel-models 1.23.0 - azureml-cli-common 1.23.0 -...

agentstack-cli (>=0.5.0rc4, <=0.6.1), artifact-ddd (>=0.0.1, <=0.0.3) +144 more potentially affected by CVE-2026-26007 via cryptography (>=46.0.0, <=46.0.4)

cryptography PYPI version =46.0.0, =0.5.0rc4, =0.0.1, =0.13.12, =3.8.9, =0.2.50, =0.7.0, =3.0.0a1, =0.4.6, =1.1.56, =1.0.3, =4.7.0, =1.28.0rc1, =1.29.0 and more Source cves: CVE-2026-26007 Source advisory: OSV:GHSA-R6PH-V2QM-Q3C2...

biweeklybudget (>=0.1.0, <=0.7.0), crossbar (17.3.1) +6 more potentially affected by CVE-2026-26007 via cryptography (1.8.1)

cryptography PYPI version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - biweeklybudget =0.1.0, =1.6.0, =1.1.2, =2.2.0, =0.3.4, =0.3.5 - typtop 0.2.11 Source cves: CVE-2026-26007 Source advisory:...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: flux, gitness, aactl, bom, aws-application-networking-k8s, thanos-operator, docker-cli, glab, nri-apache, rancher-system-upgrade-controller, terraform-provider-google, kapp, smokescreen, step, tkn, cert-exporter, dagdotdev, traefik, kubo, oauth2-proxy, mongo-tools,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: flux, gitness, aactl, bom, aws-application-networking-k8s, thanos-operator, docker-cli, glab, nri-apache, rancher-system-upgrade-controller, terraform-provider-google, kapp, smokescreen, step, tkn, cert-exporter, dagdotdev, traefik, kubo, oauth2-proxy, mongo-tools,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: rancher-security-scan, crossplane-provider-keycloak, cert-manager-openshift-routes-fips, flux-image-automation-controller-fips, gomplate, prometheus-beat-exporter, nsc-fips, knative-serving, prometheus-podman-exporter, rancher-system-upgrade-controller, sops,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: rancher-security-scan, crossplane-provider-keycloak, cert-manager-openshift-routes-fips, flux-image-automation-controller-fips, gomplate, prometheus-beat-exporter, nsc-fips, knative-serving, prometheus-podman-exporter, rancher-system-upgrade-controller, sops,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: crossplane-provider-keycloak, cert-manager-openshift-routes-fips, flux-image-automation-controller-fips, gomplate, prometheus-beat-exporter, nsc-fips, knative-serving, prometheus-podman-exporter, rancher-system-upgrade-controller, sops, loki-fips, kube-bench,...

[SECURITY] Fedora 43 Update: rust-oo7-cli-0.4.3-4.fc43

System keyring access from the terminal...

[SECURITY] Fedora 43 Update: rust-dua-cli-2.32.2-3.fc43

A tool to conveniently learn about the disk usage of directories, fast!...

GHSA-4255-C27H-62M5 unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)

The sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via JSON.stringify without sanitization, exposing secrets to shell history, CI/CD logs, and log...

Linux Distros Unpatched Vulnerability : CVE-2026-25918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive...

CVE-2026-25918

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...

CVE-2026-25918

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...

CVE-2026-25918 unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...

CVE-2026-25918

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...

CVE-2026-25918 unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...

CVE-2026-25918 unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...

CVE-2026-25918

The CVE concerns the unity-cli tool (specifically the sign-package command in the package @rage-against-the-pixel/unity-cli). Before version 1.8.2, when invoked with --verbose, the command logs sensitive credentials in plaintext by serializing CLI arguments (including --email and --password) with...