8050 matches found
CVE-2026-42338 vulnerabilities
Vulnerabilities for packages: drupal, kibana, renovate, pulumi, langfuse, kubeflow-katib, opensearch-dashboards-fips, graalvm, tileserver-gl, opensearch-dashboards, wazuh-dashboard-fips, prism, gemini-cli, langfuse-fips, code-server, lerna, npm, tileserver-gl-fips, saf, wazuh-dashboard,...
GHSA-PGF8-2HGJ-GRQG Vercel: Non-interactive mode includes CLI arguments in suggested command output
Summary When the Vercel CLI runs in non-interactive mode --non-interactive or auto-detected AI agent, commands that cannot complete autonomously emit JSON payloads with suggested follow-up commands. If the user authenticated via --token or -t on the command line, the token value is included...
NPM: Vercel: Non-interactive mode includes CLI arguments in suggested command output
NPM: Vercel: Non-interactive mode includes CLI arguments in suggested command output vulnerability discovered by ? in WordPress Npm vercel versions = 50.16.0, = 52.0.0...
PT-2026-38406
Name of the Vulnerable Software and Affected Versions Vercel CLI versions 50.16.0 through 52.0.0 Description When running in non-interactive mode via the --non-interactive flag or auto-detected AI agent, commands that cannot complete autonomously emit JSON payloads containing suggested follow-up...
cf-cli-8.18.3+git.0.83ce51d9c-1.1 on GA media (moderate)
cf-cli-8.18.3+git.0.83ce51d9c-1.1 on GA media Announcement ID: openSUSE-SU-2026:10688-1 Rating: moderate Cross-References: CVE-2025-61729 CVSS scores: CVE-2025-61729 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-61729 SUSE : 8.7...
PT-2026-38545
A vulnerability has been found in router-for-me CLIProxyAPI 6.9.29. Affected by this issue is some unknown functionality of the file internal/api/handlers/management/api tools.go of the component API Interface. The manipulation of the argument url leads to server-side request forgery. Remote...
CLI Proxy API 代码问题漏洞
CLI Proxy API is an open-source CLI proxy server developed by Router-For.ME, which supports multi-model APIs. Version 6.9.29 of the CLI Proxy API has a code vulnerability that stems from the handling of the url parameter in the file internal/api/handlers/management/apitools.go. This vulnerability...
Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE
Google patches a CVSS 10 Gemini CLI vulnerability that allowed hackers to use prompt injection and privilege escalation for a full supply chain compromise...
CVE-2026-41898 vulnerabilities
Vulnerabilities for packages: vector, typst, rpm-sequoia, ztunnel-fips, sdp-k8s-injector, rustls-openssl-client, sentry-cli, sqlx, bootc, rustup, komodo, deno, sccache, guestproxyagent, valkey-ldap...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: nextcloud-server, py3-jupyterlab, drupal, azurite, jitsucom-jitsu, kibana, redisinsight, gitlab-rails-ce-fips, renovate, langfuse, py3-captum, kubeflow-katib, opensearch-dashboards-fips, argo-workflows, wazuh-dashboard-fips, opensearch-dashboards, gemini-cli, prism,...
CVE-2026-41506 vulnerabilities
Vulnerabilities for packages: argo-events, flux-image-automation-controller, pulumi-language-yaml, gitlab-rails-ce-fips, scorecard, gitaly, kubevela, syft, flux-source-controller, argo-workflows, packer, argo-cd, chainctl, pulumi-language-java, teleport, rancher-fleet, kots, cloudbeat,...
CVE-2026-35254
Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with network access to compromise Oracle OCI CLI. Successful attacks of this vulnerability can result in...
CVE-2026-35254
Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with network access to compromise Oracle OCI CLI. Successful attacks of this vulnerability can result in...
CVE-2026-35254
CVE-2026-35254 affects Oracle OCI CLI (Oracle Open Source Projects) with affected version 3.77. The vulnerability enables an unauthenticated, network-accessible attacker to cause Oracle OCI CLI to place imported files outside the intended directory, indicating a path traversal-like impact. CVSS3....
EUVD-2026-27534
Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with network access to compromise Oracle OCI CLI. Successful attacks of this vulnerability can result in...
GHSA-WPQR-6V78-JR5G vulnerabilities
Vulnerabilities for packages: gemini-cli...
PT-2026-37373
Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects. The supported versions that is affected is v2.3.2. Easily exploitable vulnerability allows unauthenticated attacker to compromise Oracle Cloud Native Environment Command Line...
Oracle OCI CLI 路径遍历漏洞
Oracle OCI CLI is a cloud infrastructure management command-line tool developed by Oracle Corporation in the United States. Version 3.77 of Oracle OCI CLI contains a path traversal vulnerability. This vulnerability allows unauthorized attackers to access the system through the network, enabling...