16037 matches found
[SECURITY] Fedora 42 Update: rust-oo7-cli-0.3.3-5.fc42
System keyring access from the terminal...
CVE-2026-26029: Improper Neutralization of Special Elements used in an OS Command
sf-mcp-server is an implementation of Salesforce MCP server for Claude for Desktop. A command injection vulnerability exists in sf-mcp-server due to unsafe use of childprocess.exec when constructing Salesforce CLI commands with user-controlled input. Successful exploitation allows attackers to...
agent-nebula-platform (>=5.0.0, <=5.0.1), agent-nebula-sdk (>=5.0.0, <=5.0.2) +151 more potentially affected by CVE-2026-26007 via cryptography (>=46.0.0, <=46.0.4)
cryptography PYPI version =46.0.0, =5.0.0, =5.0.0, =0.5.0rc4, =0.0.1, =0.13.12, =3.8.9, =0.2.50, =0.7.0, =3.0.0a1, =0.4.6, =0.4.7 - azure-quantum 3.13.0 and more Source cves: CVE-2026-26007 Source advisory: OSV:PYSEC-2026-2141...
azure-cli (>=2.0.58, <=2.0.66), azure-cli-appservice (>=0.2.13, <=0.2.20) +27 more potentially affected by CVE-2026-26007 via cryptography (2.4.2)
cryptography PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - azure-cli =2.0.58, =0.2.13, =1.5.5, =1.0.0b6, =18.4.0, =0.3.0rc1, =1.0.3, =0.1.0, =1.2.8, =1.0.5, =2.1.12 and more Source cves:...
moca (0.3.3), oraclebmc (>=1.1.0, <=1.1.1) +2 more potentially affected by CVE-2026-26007 via cryptography (1.5.2)
cryptography PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - moca 0.3.3 - oraclebmc =1.1.0, =2.1.0, =2.1.3 - teamvault 0.6.1 Source cves: CVE-2026-26007 Source advisory: OSV:PYSEC-2026-2141...
agent-nebula-platform (>=5.0.0, <=5.0.1), agent-nebula-sdk (>=5.0.0, <=5.0.2) +151 more potentially affected by CVE-2026-26007 via cryptography (>=46.0.0, <=46.0.4)
cryptography PYPI version =46.0.0, =5.0.0, =5.0.0, =0.5.0rc4, =0.0.1, =0.13.12, =3.8.9, =0.2.50, =0.7.0, =3.0.0a1, =0.4.6, =0.4.7 - azure-quantum 3.13.0 and more Source cves: CVE-2026-26007 Source advisory: OSV:GHSA-R6PH-V2QM-Q3C2...
agent-nebula-platform (>=5.0.0, <=5.0.1), agent-nebula-sdk (>=5.0.0, <=5.0.2) +151 more potentially affected by CVE-2026-26007 via cryptography (>=46.0.0, <=46.0.4)
cryptography PYPI version =46.0.0, =5.0.0, =5.0.0, =0.5.0rc4, =0.0.1, =0.13.12, =3.8.9, =0.2.50, =0.7.0, =3.0.0a1, =0.4.6, =0.4.7 - azure-quantum 3.13.0 and more Source cves: CVE-2026-26007 Source advisory: GHSA-R6PH-V2QM-Q3C2...
3lc (>=2.3.84, <=2.11.2), aba-cli-scrapper (>=0.1.0, <=0.5.6) +898 more potentially affected by CVE-2026-26007 via cryptography (42.0.8)
cryptography PYPI version 42.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - 3lc =2.3.84, =0.1.0, =2.3.57, =0.1.0, =0.4.0, =0.1.0, =0.0.1, =0.1.1, =1.0.0a1, =4.3.0, =0.12.0, =0.0.1rc1, =6.6.0rc1 and more Source...
ali2b-cli-scrapper (>=1.0.0, <=1.0.1), ambient-edge-server (>=0.1.2, <=0.2.4) +64 more potentially affected by CVE-2026-26007 via cryptography (42.0.7)
cryptography PYPI version 42.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ali2b-cli-scrapper =1.0.0, =0.1.2, =0.2.13, =0.1.10, =2.1.0rc1, =0.3.0, =0.3.9, =2.7.0, =0.1.2, =0.1.3 - edx-repo-tools 1.0.0 and more...
ais-dom (>=0.96.10, <=0.98.9), ali-cli (>=0.5.1, <=0.7.2) +52 more potentially affected by CVE-2026-26007 via cryptography (2.7.0)
cryptography PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ais-dom =0.96.10, =0.5.1, =0.0.1, =0.5.0, =1.0.1, =1.0.1, =0.0.5a0, =0.2.12, =2.5.6, =0.1.0, =0.5.1, =0.5.2 - duo-universal 1.0.1 -...
biweeklybudget (>=0.1.0, <=0.7.0), crossbar (17.3.1) +6 more potentially affected by CVE-2026-26007 via cryptography (1.8.1)
cryptography PYPI version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - biweeklybudget =0.1.0, =1.6.0, =1.1.2, =2.2.0, =0.3.4, =0.3.5 - typtop 0.2.11 Source cves: CVE-2026-26007 Source advisory:...
airflow-run (0.4.9), ais-dom (>=0.117.0b0, <=2021.2.4) +49 more potentially affected by CVE-2026-26007 via cryptography (3.2.0)
cryptography PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - airflow-run 0.4.9 - ais-dom =0.117.0b0, =2.0.1.dev14, =2.0.2 - azureml-accel-models 1.23.0 - azureml-cli-common 1.23.0 -...
askflow-cli (1.0.0), atlassian-jwt-auth (>=8.0.2, <=9.0.0) +68 more potentially affected by CVE-2026-26007 via cryptography (3.2.1)
cryptography PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - askflow-cli 1.0.0 - atlassian-jwt-auth =8.0.2, =0.0.9, =0.2.7a0, =0.0.2, =0.0.1a12, =0.6.0, =3.1.12, =2.1.0, =1.0.0, =0.0.19, =0.7.1,...
moca (0.3.3), oraclebmc (>=1.1.0, <=1.1.1) +2 more potentially affected by CVE-2026-26007 via cryptography (1.5.2)
cryptography PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - moca 0.3.3 - oraclebmc =1.1.0, =2.1.0, =2.1.3 - teamvault 0.6.1 Source cves: CVE-2026-26007 Source advisory: OSV:GHSA-R6PH-V2QM-Q3C2...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: gcsfuse, docker-credential-ecr-login, prometheus-alertmanager, cluster-api-provider-vsphere, langfuse, aactl, multus-cni, flux-image-automation-controller, kube-logging-operator-custom-runner, caddy, nodetaint, syft, grype, crossplane-provider-aws-rds, lvm-driver,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: gcsfuse, docker-credential-ecr-login, prometheus-alertmanager, cluster-api-provider-vsphere, langfuse, aactl, flux-image-automation-controller, kube-logging-operator-custom-runner, caddy, nodetaint, syft, grype, crossplane-provider-aws-rds, lvm-driver, controller-gen...
GHSA-8JVR-VH7G-F8GX vulnerabilities
Vulnerabilities for packages: karpenter, gcsfuse, pgtimetable-fips, tailscale, cloudprober, crossplane-provider-azure-managedidentity, nova-fips, minc, beats, aws-flb-kinesis-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, fluxcd-kustomize-mutating-webhook-fips,...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: karpenter, gcsfuse, pgtimetable-fips, tailscale, cloudprober, crossplane-provider-azure-managedidentity, nova-fips, minc, beats, aws-flb-kinesis-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, fluxcd-kustomize-mutating-webhook-fips,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: karpenter, gcsfuse, pgtimetable-fips, tailscale, cloudprober, crossplane-provider-azure-managedidentity, nova-fips, minc, beats, aws-flb-kinesis-fips, kubernetes-dashboard-metrics-scraper, falcosidekick-fips, fluxcd-kustomize-mutating-webhook-fips,...