GHSA-XC68-RRQC-QGQ3 MCP NMAP Server has an Injection vulnerability

A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38. Affected by this issue is the function childprocess.exec of the file src/index.ts of the component Nmap CLI Command Handler. The manipulation results in command injection. The attack may...

CVE-2026-3484

A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38. Affected by this issue is the function childprocess.exec of the file src/index.ts of the component Nmap CLI Command Handler. The manipulation results in command injection. The attack may...

CVE-2026-3484

A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38. Affected by this issue is the function childprocess.exec of the file src/index.ts of the component Nmap CLI Command Handler. The manipulation results in command injection. The attack may...

CVE-2026-3484: Improper Neutralization of Special Elements used in a Command

A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38. Affected by this issue is the function childprocess.exec of the file src/index.ts of the component Nmap CLI Command Handler. The manipulation results in command injection. The attack may...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-28804 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-28804 Source advisory: OSV:GHSA-9M86-7PMV-2852...

@oneuptime/cli (>=10.0.5, <=10.0.11) potentially affected by CVE-2026-28787 via @oneuptime/common (>=10.0.5, <=10.0.11)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.11 Source cves: CVE-2026-28787 Source advisory: GHSA-GJJC-PCWP-C74M...

@oneuptime/cli (>=10.0.5, <=10.0.11) potentially affected by CVE-2026-28787 via @oneuptime/common (>=10.0.5, <=10.0.11)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.11 Source cves: CVE-2026-28787 Source advisory: OSV:GHSA-GJJC-PCWP-C74M...

@oneuptime/cli (>=10.0.5, <=10.0.14) potentially affected by CVE-2026-28787 via @oneuptime/common (>=10.0.5, <=10.0.14)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.14 Source cves: CVE-2026-28787 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15369565...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: azuredisk-csi, kube-conformance, cluster-api-provider-vsphere, opentofu-fips, prometheus-adapter, prometheus-mongodb-exporter-fips, percona-server-mongodb-operator-fips, terraform-fips, temporal-server, rke2-cloud-provider-fips, juicefs, dgraph, grafana-beyla,...

ch.acanda.maven:code-analysis-maven-plugin (1.5.0), com.eventoframework:evento-cli (>=ev1.4.1, <=ev1.15.5) +66 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (6.55.0)

net.sourceforge.pmd:pmd-core MAVEN version 6.55.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - ch.acanda.maven:code-analysis-maven-plugin 1.5.0 - com.eventoframework:evento-cli =ev1.4.1, =ev1.4.1,...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-28351 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-28351 Source advisory: OSV:GHSA-F2V5-7JQ9-H8CG...

indexdoc-converter (>=0.2.4, <=0.2.7), pdd-cli (>=0.0.70, <=0.0.250) +2 more potentially affected by CVE-2026-28231 via pillow-heif (>=1.1.0, <=1.2.0)

pillow-heif PYPI version =1.1.0, =0.2.4, =0.0.70, =0.4.0, =0.0.11, =0.0.33 Source cves: CVE-2026-28231 Source advisory: SNYK:PYTHON-PILLOWHEIF-15426536...

imgtools-cli (>=1.0.3, <=1.0.8) potentially affected by CVE-2026-28231 via pillow-heif (0.9.0)

pillow-heif PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow-heif and may be impacted: - imgtools-cli =1.0.3, =1.0.8 Source cves: CVE-2026-28231 Source advisory: OSV:PYSEC-2026-2258...

indexdoc-converter (>=0.2.4, <=0.2.7), pdd-cli (>=0.0.70, <=0.0.250) +2 more potentially affected by CVE-2026-28231 via pillow-heif (>=1.1.0, <=1.2.0)

pillow-heif PYPI version =1.1.0, =0.2.4, =0.0.70, =0.4.0, =0.0.11, =0.0.33 Source cves: CVE-2026-28231 Source advisory: OSV:PYSEC-2026-2258...

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions in the clihistory feature. An attacker can access sensitive command history and API request/response data by reading the history database file if it is created with default permissions on a multi-user Unix...

aiida-project (0.7.0), airbyte (>=0.71.2.dev141039313338033, <=1.0.0rc35) +73 more potentially affected by CVE-2025-13327 via uv (>=0.1.45, <=0.9.5)

uv PYPI version =0.1.45, =0.71.2.dev141039313338033, =0.112.0, =0.1.0, =0.1.2, =1.0.3, =0.5.0.dev0, =1.0.0, =11.5.1, =0.0.24, =1.2.4, =1.2.5 and more Source cves: CVE-2025-13327 Source advisory: OSV:PYSEC-2026-2295...

GO-2026-4556 Vikunja has Path Traversal in CLI Restore in code.vikunja.io/api

Vikunja has Path Traversal in CLI Restore in code.vikunja.io/api...

PT-2026-50579

Уязвимость параметра cli history инструмента командной строки для взаимодействия с сервисами Amazon Web Services AWS CLI связана с использованием имени с неправильной ссылкой. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

digger-cli-0.6.143-1.1 on GA media (moderate)

digger-cli-0.6.143-1.1 on GA media Announcement ID: openSUSE-SU-2026:10260-1 Rating: moderate Cross-References: CVE-2025-61729 CVSS scores: CVE-2025-61729 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-61729 SUSE : 8.7...

CVE-2026-20037

A vulnerability in the NX-OS CLI privilege levels of Cisco UCS Manager Software could allow an authenticated, local attacker with read-only privileges to modify files and perform unauthorized actions on an affected system. This vulnerability exists because unnecessary privileges are given to the...