17831 matches found
DEBIAN-CVE-2025-54363
Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. extractfullsummaryfromsignature employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings...
UBUNTU-CVE-2025-54363
Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. extractfullsummaryfromsignature employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings...
CVE-2025-9262: Improper Neutralization of Special Elements used in an OS Command
A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...
CVE-2025-54364: Inefficient Regular Expression Complexity
Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. optiondescriptions employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings containing a...
mcp-cli security vulnerability
mcp-cli is a model context protocol checker for Wong2 Personal Developer. A security vulnerability exists in mcp-cli version 1.13.0, which stems from an incorrect operation of the function redirectToAuthorization in the file /src/oauth/provider.js resulting in os command injection...
CVE-2025-54363: Inefficient Regular Expression Complexity
Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. extractfullsummaryfromsignature employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: k9s, tflint, zot, trivy-operator, steampipe, conftest, kubescape, terragrunt, snyk-cli, zarf, opentofu, kots, wolfictl, grype, terraform, trivy, xeol, syft, tfsec, rancher-fleet...
GHSA-WJRX-6529-HCJ3 vulnerabilities
Vulnerabilities for packages: k9s, tflint, zot, trivy-operator, steampipe, conftest, kubescape, terragrunt, snyk-cli, zarf, opentofu, kots, wolfictl, grype, terraform, trivy, xeol, syft, tfsec, rancher-fleet...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: k9s, opentofu-fips, tflint, chainctl, zot, trivy-operator, steampipe, syft-fips, trivy-operator-fips, grype-fips, conftest, cloudbeat-fips, kubescape, grype-db, rancher-fleet-fips, terragrunt, trivy-fips, snyk-cli, zarf, opentofu, kots, cloudbeat, grype, wolfictl,...
dialogy (>=0.2.3, <=0.9.20), flexlate-dev (>=0.1.0, <=0.19.0) +2 more potentially affected by CVE-2025-55201 via copier (5.1.0)
copier PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dialogy =0.2.3, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2025-55201 Source advisory: OSV:GHSA-3XW7-V6CJ-5Q8H...
data-pipelines-cli (>=0.31.0, <=0.32.0), pytoil (>=0.36.0, <=0.38.1) potentially affected by CVE-2025-55201 via copier (7.0.1)
copier PYPI version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - data-pipelines-cli =0.31.0, =0.36.0, =0.38.1 Source cves: CVE-2025-55201 Source advisory: OSV:GHSA-3XW7-V6CJ-5Q8H...
Malware in meid-cli
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious Package
Overview meid-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in meid-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54a1eca3fe980472cd2c418bc50f361595c86cc248665cdf8e01129e7af96f66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-34152 Malicious code in subtitles-cli (npm)
The package subtitles-cli was found to contain malicious code...
Malicious code in h1-cli-device-node (npm)
The package h1-cli-device-node was found to contain malicious code...
MAL-2025-19577 Malicious code in ember_cli_babe (npm)
The package emberclibabe was found to contain malicious code...
MAL-2025-20260 Malicious code in fazilet-cli (npm)
The package fazilet-cli was found to contain malicious code...