630 matches found
AutoStrike
Gemini Bug Bounty Find security vulnerabilities, get paid...
gemini-bug-bounty
Gemini Bug Bounty Find security vulnerabilities, get paid...
Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution
Google has addressed a maximum severity security flaw in Gemini CLI -- the "@google/gemini-cli" npm package and the "google-github-actions/run-gemini-cli" GitHub Actions workflow -- that could have allowed attackers to execute arbitrary commands on host systems. "The vulnerability allowed an...
Command Injection
Overview @google/gemini-cli is a Gemini CLI Affected versions of this package are vulnerable to Command Injection via the processing of untrusted workspace folders in headless mode and the handling of tool allowlisting under --yolo mode. An attacker can execute arbitrary code by submitting...
@13w/local-rag (2.0.0), @amodalai/cli (>=0.1.0, <=0.1.1) +32 more potentially affected by CVE-2026-12537 +1 more via @google/gemini-cli (>=0.1.17, <=0.39.0-nightly.20260411.0957f7d3e)
@google/gemini-cli NPM version =0.1.17, =0.1.0, =0.1.5, =0.1.0, =1.0.0, =0.0.17, =0.6.4, =0.0.1, =1.3.0, =0.1.4, =0.1.10, =0.3.0 and more Source cves: CVE-2026-12537, CVE-2026-13745 Source advisory: OSV:GHSA-WPQR-6V78-JR5G...
@13w/local-rag (2.0.0), @amodalai/cli (>=0.1.0, <=0.1.1) +32 more potentially affected by unknown CVE via @google/gemini-cli (>=0.1.17, <=0.39.0-nightly.20260411.0957f7d3e)
@google/gemini-cli NPM version =0.1.17, =0.1.0, =0.1.5, =0.1.0, =1.0.0, =0.0.17, =0.6.4, =0.0.1, =1.3.0, =0.1.4, =0.1.10, =0.3.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-GOOGLEGEMINICLI-16301693...
Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses
Summary Gemini CLI @google/gemini-cli and the run-gemini-cli GitHub Action are being updated to harden workspace trust and tool allowlisting, in particular when used in untrusted environments like GitHub Actions. This update introduces a breaking change to how non-interactive headless environment...
GHSA-WPQR-6V78-JR5G Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses
Summary Gemini CLI @google/gemini-cli and the run-gemini-cli GitHub Action are being updated to harden workspace trust and tool allowlisting, in particular when used in untrusted environments like GitHub Actions. This update introduces a breaking change to how non-interactive headless environment...
PT-2026-51788
Name of the Vulnerable Software and Affected Versions Google Gemini CLI versions prior to 0.39.1 run-gemini-cli GitHub Action versions prior to 0.1.22 Description An OS command injection flaw exists in the container launcher used by Google Gemini CLI and the run-gemini-cli GitHub Action when...
Malicious code in gemini-cli-vscode-ide-companion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98d87fa5f23a47c4b1ea2c0cecb3e88518985493c1b7f125299ecf8ee6dba1 The package gemini-cli-vscode-ide-companion was found to contain malicious code...
MAL-2026-2764 Malicious code in gemini-cli-vscode-ide-companion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98d87fa5f23a47c4b1ea2c0cecb3e88518985493c1b7f125299ecf8ee6dba1 The package gemini-cli-vscode-ide-companion was found to contain malicious code...
MAL-2026-2763 Malicious code in gemini-ai-checker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce523af945a4246ec60ceb49c42757844915ea6b3657e989e0254ae1212aab92 The package gemini-ai-checker was found to contain malicious code...
Malicious code in gemini-ai-checker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce523af945a4246ec60ceb49c42757844915ea6b3657e989e0254ae1212aab92 The package gemini-ai-checker was found to contain malicious code...
Maestro 0.15.3
Maestro is a cross-platform desktop app for orchestrating your fleet of AI agents and projects. It's a high-velocity solution for hackers who are juggling multiple projects in parallel. Designed for power users who live on the keyboard and rarely touch the mouse. Collaborate with AI to create...
GHSA-R5RP-J6WH-RVV4 vulnerabilities
Vulnerabilities for packages: gemini-cli, langfuse, langfuse-fips, librechat, opensearch-dashboards, opensearch-dashboards-fips, kibana...
GHSA-WMMM-F939-6G9C vulnerabilities
Vulnerabilities for packages: gemini-cli, langfuse, langfuse-fips, librechat, opensearch-dashboards, opensearch-dashboards-fips, kibana...
CVE-2026-39406 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, gemini-cli, langfuse, langfuse-fips, librechat, opensearch-dashboards, opensearch-dashboards-fips, wazuh-dashboard-fips, kibana...
GHSA-XPCF-PG52-R92G vulnerabilities
Vulnerabilities for packages: gemini-cli, langfuse, langfuse-fips, librechat, opensearch-dashboards, opensearch-dashboards-fips, kibana...