@saltcorn/admin-models (>=1.5.0-beta.0, <=1.5.0-beta.18), @saltcorn/base-plugin (>=1.5.0-beta.0, <=1.5.0-beta.18) +5 more potentially affected by unknown CVE via @saltcorn/data (>=1.5.0-beta.0, <=1.5.0-beta.18)

@saltcorn/data NPM version =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.18 Source cves: unknown CVE Source advisory: SNYK:JS-SALTCORNDATA-15126137...

@saltcorn/cli (>=1.1.1, <=1.4.1), @saltcorn/mobile-builder (>=1.1.1, <=1.4.1) potentially affected by unknown CVE via @saltcorn/server (>=1.1.1, <=1.4.1)

@saltcorn/server NPM version =1.1.1, =1.1.1, =1.1.1, =1.4.1 Source cves: unknown CVE Source advisory: SNYK:JS-SALTCORNSERVER-15126139...

@saltcorn/cli (>=1.1.1, <=1.5.0-beta.18), @saltcorn/mobile-builder (>=1.1.1, <=1.5.0-beta.18) potentially affected by unknown CVE via @saltcorn/server (>=1.1.1, <=1.5.0-beta.18)

@saltcorn/server NPM version =1.1.1, =1.1.1, =1.1.1, =1.5.0-beta.18 Source cves: unknown CVE Source advisory: GHSA-CR3W-CW5W-H3FJ...

@saltcorn/cli (>=1.5.0-beta.0, <=1.5.0-beta.18), @saltcorn/mobile-builder (>=1.5.0-beta.0, <=1.5.0-beta.18) +1 more potentially affected by unknown CVE via @saltcorn/admin-models (>=1.5.0-beta.0, <=1.5.0-beta.18)

@saltcorn/admin-models NPM version =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.18 Source cves: unknown CVE Source advisory: SNYK:JS-SALTCORNADMINMODELS-15126138...

@saltcorn/cli (>=1.1.1, <=1.5.0-beta.18), @saltcorn/mobile-builder (>=1.1.1, <=1.5.0-beta.18) potentially affected by unknown CVE via @saltcorn/server (>=1.1.1, <=1.5.0-beta.18)

@saltcorn/server NPM version =1.1.1, =1.1.1, =1.1.1, =1.5.0-beta.18 Source cves: unknown CVE Source advisory: OSV:GHSA-CR3W-CW5W-H3FJ...

@saltcorn/cli (>=1.5.0-beta.0, <=1.5.0-beta.18), @saltcorn/mobile-builder (>=1.5.0-beta.0, <=1.5.0-beta.18) potentially affected by unknown CVE via @saltcorn/server (>=1.5.0-beta.0, <=1.5.0-beta.18)

@saltcorn/server NPM version =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.0, =1.5.0-beta.18 Source cves: unknown CVE Source advisory: SNYK:JS-SALTCORNSERVER-15126139...

10xscale-agentflow-cli (0.1.5), a2 (>=0.1.0, <=0.3.17) +952 more potentially affected by CVE-2026-24486 via python-multipart (>=0.0.5, <=0.0.21)

python-multipart PYPI version =0.0.5, =0.1.0, =0.2.1, =0.2.0, =0.5.1.dev0, =3.2.0, =1.5.2, =0.1.1, =0.1.4b1, =1.0.0, =0.1.8, =0.27.6 and more Source cves: CVE-2026-24486 Source advisory: GHSA-WP53-J4WJ-2CFG...

AZL-75413 CVE-2025-11065 affecting package docker-cli for versions less than 25.0.7-2

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +281 more potentially affected by CVE-2026-22709 via vm2 (>=3.0.0, <=3.10.1)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@runhalodev/cli (>=0.0.1, <=0.0.3), nearai-cloud-verifier (0.0.1-alpha.1) potentially affected by CVE-2026-22696 via @phala/dcap-qvl-node (0.3.3)

@phala/dcap-qvl-node NPM version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on @phala/dcap-qvl-node and may be impacted: - @runhalodev/cli =0.0.1, =0.0.3 - nearai-cloud-verifier 0.0.1-alpha.1 Source cves: CVE-2026-22696 Source advisory:...

@runhalodev/cli (>=0.0.1, <=0.0.3), nearai-cloud-verifier (0.0.1-alpha.1) potentially affected by CVE-2026-22696 via @phala/dcap-qvl-node (0.3.3)

@phala/dcap-qvl-node NPM version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on @phala/dcap-qvl-node and may be impacted: - @runhalodev/cli =0.0.1, =0.0.3 - nearai-cloud-verifier 0.0.1-alpha.1 Source cves: CVE-2026-22696 Source advisory:...

GHSA-8RRH-RW8J-W5FX vulnerabilities

Vulnerabilities for packages: pip-zipapp, open-webui, aws-cli, pypy-3.10, superset, kubeflow-katib, pypy-3.11, emissary, py3-virtualenv, py3-cassandra-medusa, semgrep, kserve, datadog-agent, kubeflow-jupyter-web-app, py3-setuptools, dask-kubernetes, airflow...

GHSA-8RRH-RW8J-W5FX vulnerabilities

Vulnerabilities for packages: azure-functions-python-worker, superset, nemo-rl-cuda-13.0, kubeflow-jupyter-web-app, datadog-agent, tritonserver-backend-vllm-cuda-12.9, mlflow, py3-setuptools, py3-virtualenv, datadog-agent-fips, open-webui, py3.9-setuptools, dbt-bigquery, pip-zipapp, pypy-3.10,...

SUSE SLES12 Security Update : azure-cli-core (SUSE-SU-2026:0273-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:0273-1 advisory. - CVE-2025-24049: Fix improper neutralization of special elements used in a command which allows an unauthorized attacker to elevate...

CVE-2026-24117 vulnerabilities

Vulnerabilities for packages: teleport, gitsign, trivy-operator, ko, zot, spire-server, witness, zarf, flux-source-controller, buildkitd, falcoctl, aactl, vexctl, trivy, kyverno-notation-aws, tkn, policy-controller, tflint, cosign, tekton-chains, skaffold, ratify, goreleaser,...

a2a-sdk (0.2.8), a7p (>=1.0.1rc2, <=1.0.2) +245 more potentially affected by CVE-2026-0994 via protobuf (>=6.30.0, <=6.33.4)

protobuf PYPI version =6.30.0, =1.0.1rc2, =0.1.3, =2025.12.2.2, =0.4.0rc1, =1.0.0, =1.0.29, =25.6.0b2, =1.2.0, =0.1.0, =0.2.1b20230930, =0.0.32, =1.3.0.dev4, =1.3.0 and more Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

SUSE-SU-2026:0273-1 Security update for azure-cli-core

This update for azure-cli-core fixes the following issues: - CVE-2025-24049: Fix improper neutralization of special elements used in a command which allows an unauthorized attacker to elevate privileges locally. bsc1239460...

CVE-2026-0775

npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of npm cli. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...

CVE-2026-0775

The CVE-2026-0775 entry concerns npm cli. Affected component: the module-loading path in npm cli, where modules are loaded from an unsecured location. Root cause: incorrect permission assignment that allows a local attacker who can run low-privileged code to escalate privileges and execute arbitr...

CVE-2026-0775 npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability

npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of npm cli. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...