PT-2025-54756

This attempts to typosquat the existing crate finch cli to steal credentials from local files. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 18 times. There were no crates depending on this crate on crates.io. Thanks to Matthias Zepper of NGI Sweden for reporti...

PT-2025-54755

This crate was used as a dependency by finch cli rust and finch-rst and contained a malware payload to exfiltrate credentials. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 22 times. Other than the other crates above that were part of the attack, no other crate...

CVE-2025-12196

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.This vulnerability affects Fireware OS 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up ...

CVE-2025-12195

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuration CLI commands.This vulnerability affects Fireware OS 11.0 up to and including 11.12.4+541730, 12.0 up to and includi...

0xdegenmo-lighter-mcp (0.1.1), 1337x (1.2.5) +14084 more potentially affected by CVE-2025-66471 via urllib3 (>=1.7.1, <=2.5.0)

urllib3 PYPI version =1.7.1, =0.3.0, =0.0.1a0, =2.3.84, =0.1.0, =1.1.2, =0.1.0, =0.1.0, =0.0.2, =0.0.5, =0.0.7 - a-texam 1.1.0 - a16z 0.0.1 and more Source cves: CVE-2025-66471 Source advisory: MEND:CVE-2025-66471...

CVE-2025-12196

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.This vulnerability affects Fireware OS 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up ...

CVE-2025-12196 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...

CVE-2025-12196

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...

CVE-2025-12195 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec Configuration

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuration CLI commands...

CVE-2025-12195

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuration CLI commands...

CVE-2025-12026

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands...

AZL-71572 CVE-2025-65637 affecting package dcos-cli for versions less than 1.2.0-23

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

AZL-71516 CVE-2025-65637 affecting package dcos-cli for versions less than 1.2.0-20

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

@townco/agent (>=0.1.20, <=0.1.144), @townco/cli (>=0.1.20, <=0.1.141) +1 more potentially affected by CVE-2025-66479 via @anthropic-ai/sandbox-runtime (0.0.2)

@anthropic-ai/sandbox-runtime NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @anthropic-ai/sandbox-runtime and may be impacted: - @townco/agent =0.1.20, =0.1.20, =0.1.34, =0.1.38 Source cves: CVE-2025-66479 Source advisory:...

@townco/agent (>=0.1.20, <=0.1.144), @townco/cli (>=0.1.20, <=0.1.141) +1 more potentially affected by CVE-2025-66479 via @anthropic-ai/sandbox-runtime (0.0.2)

@anthropic-ai/sandbox-runtime NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @anthropic-ai/sandbox-runtime and may be impacted: - @townco/agent =0.1.20, =0.1.20, =0.1.34, =0.1.38 Source cves: CVE-2025-66479 Source advisory:...

@townco/agent (>=0.1.20, <=0.1.144), @townco/cli (>=0.1.20, <=0.1.141) +1 more potentially affected by CVE-2025-66479 via @anthropic-ai/sandbox-runtime (0.0.2)

@anthropic-ai/sandbox-runtime NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @anthropic-ai/sandbox-runtime and may be impacted: - @townco/agent =0.1.20, =0.1.20, =0.1.34, =0.1.38 Source cves: CVE-2025-66479 Source advisory:...

ops-cli (>=1.12.1, <=2.0.4), unfurl (>=0.0.1.dev144, <=0.0.1.dev220) potentially affected by CVE-2025-14010 via ansible (2.7.13)

ansible PYPI version 2.7.13 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ops-cli =1.12.1, =0.0.1.dev144, =0.0.1.dev220 Source cves: CVE-2025-14010 Source advisory: OSV:GHSA-8GGH-XWR9-3373...

delta-core (>=1.1.2, <=1.2.1), deltatwin-cli (>=1.3.2, <=1.5.0) potentially affected by CVE-2025-14010 via ansible (9.1.0)

ansible PYPI version 9.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - delta-core =1.1.2, =1.3.2, =1.5.0 Source cves: CVE-2025-14010 Source advisory: OSV:GHSA-8GGH-XWR9-3373...

ops-cli (>=2.0.11, <=2.1.7) potentially affected by CVE-2025-14010 via ansible (2.9.25)

ansible PYPI version 2.9.25 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ops-cli =2.0.11, =2.1.7 Source cves: CVE-2025-14010 Source advisory: OSV:GHSA-8GGH-XWR9-3373...

ops-cli (>=2.2.0, <=2.2.1) potentially affected by CVE-2025-14010 via ansible (8.2.0)

ansible PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ops-cli =2.2.0, =2.2.1 Source cves: CVE-2025-14010 Source advisory: OSV:GHSA-8GGH-XWR9-3373...