CVE-2026-63406 AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets

AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the telemetry subsystem in telemetry/config.go enables tracking with a hardcoded public authToken, while clusterFingerprint in telemetry/telemetry.go reads the full configuration file and...

CLEANSTART-2026-KX60703 Security fix for ghsa-x6fh-7qmf-69xh applied in: step-cli 0.27.5-r0, step-issuer-fips 0.9.9-r1

ghsa-x6fh-7qmf-69xh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RS62088 Security fix for ghsa-j7c9-79x7-8hpr applied in: step-cli 0.27.5-r0, step-issuer-fips 0.9.9-r3

ghsa-j7c9-79x7-8hpr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZR04706 Security fix for CVE-2025-44005 applied in: step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1

CVE-2025-44005 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MK81849 Security fix for CVE-2025-66406 applied in: step 0.28.7-r2, step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1

CVE-2025-66406 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JI14170 Security fix for ghsa-q4r8-xm5f-56gw applied in: step-cli 0.27.5-r0, step-issuer 0.10.0-r0, step-issuer 0.10.1-r0

ghsa-q4r8-xm5f-56gw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TM64574 Security fix for CVE-2026-30836 applied in: step 0.28.7-r3, step 0.29.0-r2, step-cli 0.27.5-r1, step-issuer 0.10.0-r0, step-issuer 0.10.1-r0, step-issuer 0.10.2-r0, step-issuer 0.9.11-r1

CVE-2026-30836 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HY04469 Security fix for ghsa-vrw8-fxc6-2r93 applied in: gitness 3.0.1-r0, gitness 3.1.1-r0, gitness 3.2.0-r0, step-ca 0.27.5-r0, step-cli 0.27.5-r1

ghsa-vrw8-fxc6-2r93 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UT95390 Security fix for CVE-2026-41080 applied in: aws-cli 2.35.9-r2, ingress-nginx-controller 1.14.5-r2

CVE-2026-41080 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DO54413 Security fix for ghsa-mpwr-8vm7-h73f applied in: cert-manager 1.19.2-r2, cert-manager 1.19.6-r1, cert-manager 1.20.3-r2, external-secrets 2.3.0-r1, external-secrets-fips 2.7.0-r1, external-secrets-operator 2.5.0-r3, external-secrets-operator 2.6.0-r3, grafana 13.1.0-r1, step 0.29.0-r0, step 0.30.2-r0, step-cli 0.30.6-r0, trust-manager 0.20.3-r1, trust-manager 0.21.1-r1, vault 1.19.5-r1

ghsa-mpwr-8vm7-h73f affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZW76652 Security fix for ghsa-xgrm-4fwx-7qm8 applied in: cloudnative-pg 1.26.3-r1, step-cli 0.27.5-r0

ghsa-xgrm-4fwx-7qm8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZG76614 Security fix for ghsa-69x3-g4r3-p962 applied in: step-cli 0.27.5-r0

Security vulnerability affects the step-cli package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LF51380 Security fix for ghsa-9qq8-cgcv-qmc9 applied in: step-cli 0.27.5-r0

Security vulnerability affects the step-cli package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-58197: Improper Access Control

ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol servers. Prior to ToolHive CLI 0.30.1 and ToolHive Studio 0.38.0, locally run MCP server containers use the default network permission profile without network isolation, permitting access to...

PT-2026-102225

Security vulnerability affects the step-cli package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101024

Security vulnerability affects the step-cli package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95627

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authenticated privileged CLI user can execute arbitrary shell commands with root privileges. This occurs due to a command injection flaw in the create csr wildcard CLI command via the...

CVE-2026-81669: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...

Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection due to the hook editor handling in cmd/uniget/hooks.go. An attacker can execute arbitrary commands by setting EDITOR or UNIGETEDITOR to a value containing shell metacharacters and then invoking the hook...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +294 more potentially affected by CVE-2026-92933 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...