CVE-2025-11065 affecting package docker-cli for versions less than 25.0.7-2

CVE-2025-11065 affecting package docker-cli for versions less than 25.0.7-2. A patched version of the package is available...

CVE-2026-24117 affecting package gh for versions less than 2.62.0-13

CVE-2026-24117 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...

CVE-2025-47911 affecting package cf-cli for versions less than 8.7.11-5

CVE-2025-47911 affecting package cf-cli for versions less than 8.7.11-5. A patched version of the package is available...

@ind-rcg/generator (>=262.1002.0-beta.2, <=264.1004.0-beta.1), @ind-rcg/modeler-sfdx-cli-plugin (>=262.1002.0-beta.4, <=264.1004.0-beta.4) +2 more potentially affected by CVE-2026-26801 via pdfmake (>=0.3.0-beta.2, <=0.3.2)

pdfmake NPM version =0.3.0-beta.2, =262.1002.0-beta.2, =262.1002.0-beta.4, =262.1002.0-beta.3, =1.0.0, =2.3.0 Source cves: CVE-2026-26801 Source advisory: OSV:GHSA-WP52-R2FP-4VMR...

@ind-rcg/generator (>=262.1002.0-beta.2, <=264.1004.0-beta.1), @ind-rcg/modeler-sfdx-cli-plugin (>=262.1002.0-beta.4, <=264.1004.0-beta.4) +2 more potentially affected by CVE-2026-26801 via pdfmake (>=0.3.0-beta.2, <=0.3.2)

pdfmake NPM version =0.3.0-beta.2, =262.1002.0-beta.2, =262.1002.0-beta.4, =262.1002.0-beta.3, =1.0.0, =2.3.0 Source cves: CVE-2026-26801 Source advisory: GHSA-WP52-R2FP-4VMR...

EUVD-2025-208495

A cleartext storage of sensitive information vulnerability CWE-312 vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0 all versions, FortiRecorder...

GO-2026-4610 Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli

Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli...

CVE-2026-25836

An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to execute unauthorized code or commands via crafted HTTP...

CVE-2026-25689

An improper neutralization of argument delimiters in a command 'argument injection' vulnerability in Fortinet FortiDeceptor 6.2.0, FortiDeceptor 6.0 all versions, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions,...

@oneuptime/cli (>=10.0.5, <=10.0.20), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-30959 via @oneuptime/common (>=7.0.141, <=10.0.20)

@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-30959 Source advisory: MEND:CVE-2026-30959...

@oneuptime/cli (>=10.0.5, <=10.0.20), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-30958 via @oneuptime/common (>=7.0.141, <=10.0.20)

@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-30958 Source advisory: MEND:CVE-2026-30958...

@oneuptime/cli (>=10.0.5, <=10.0.20), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-30957 via @oneuptime/common (>=7.0.141, <=10.0.20)

@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-30957 Source advisory: MEND:CVE-2026-30957...

@oneuptime/cli (>=10.0.5, <=10.0.20), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-30956 via @oneuptime/common (>=7.0.141, <=10.0.20)

@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-30956 Source advisory: MEND:CVE-2026-30956...

CVE-2025-48418

A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0 through 7.0.14, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7,...

BIT-DOCKER-CLI-2025-15558 Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries docker-compose.exe, docker-buildx.exe, etc. that are executed when a...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30959 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30959 Source advisory: GHSA-CW6X-MW64-Q6PV...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30959 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30959 Source advisory: OSV:GHSA-CW6X-MW64-Q6PV...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30959 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30959 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15469597...

@oneuptime/cli (>=10.0.15, <=10.0.20) potentially affected by CVE-2026-30957 via @oneuptime/common (>=10.0.15, <=10.0.20)

@oneuptime/common NPM version =10.0.15, =10.0.15, =10.0.20 Source cves: CVE-2026-30957 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15469296...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30957 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30957 Source advisory: GHSA-JW8Q-GJVG-8W4Q...