CVE-2026-111079 Goose: goose: shell history and environment leak via terminal integration

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

CVE-2026-111079

A vulnerability exists in Goose where the terminal integration feature captures shell command history and transmits it verbatim to Large Language Model (LLM) provider endpoints without sanitization. If a user inputs sensitive data such as API tokens, passwords, or environment variables , this inf...

EUVD-2026-108113

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

CVE-2026-111079 Goose: goose: shell history and environment leak via terminal integration

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

CVE-2026-111079

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

Virtualenv: Generated POSIX Console Launchers Interpret Destination Paths As Shell Syntax

Summary A destination path supplied to virtualenv can be interpreted as shell syntax by a generated POSIX console launcher. The app-data seeder and pip delegate launcher generation to distlib but supply the interpreter path in a form that does not preserve it as literal data in the shell wrapper...

Malicious code in zzhelloworld_socktest (RubyGems)

Source: amazon-inspector 4344ab16d08a7e38ea2f32b406453f86d792c0fa17103125ad84ffd0e39c187f On require "zzhelloworldsocktest", the library's top-level module body opens a TCP connection to the hardcoded remote endpoint 66.78.40.218:32768, reopens STDIN, STDOUT, and STDERR onto that socket, and exec...

Malicious code in journey-test-hellospy (PyPI)

Source: kam193 418fea1fe789e9a44c77c08c9135b3da66b773882c9fb2757094c3f55b04321b During installation, package exfiltrates potentially sensitive environmental variables --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-journey-test-helloshell...

AlmaLinux 9.2 [TuxCare] Security Update: rsync / rsync-daemon (ALMALINUX9.2:CLSA-2026:1792659934)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792659934 advisory. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper that...

Linux Distros Unpatched Vulnerability : CVE-2026-111079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without...

Fedora 43 : gnome-shell-extension-gsconnect (2026-eb93fa8f63)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eb93fa8f63 advisory. Voici les notes de la release, telles que publies par daniellandau le 2026-09-23 : --- Release GSConnect v73 What's Changed Security: fix authenticated path...

PT-2026-121335

Name of the Vulnerable Software and Affected Versions Goose affected versions not specified Description A flaw exists when the terminal integration feature is enabled, causing the application to capture shell command history and send it without sanitization to configured Large Language Model LLM...

Joern 4.0.663

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Red Hat: CVE-2026-111079: goose: goose: Shell History and Environment Leak via Terminal Integration

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

UBUNTU-CVE-2026-91786

A flaw was found in GNOME Shell. When processing icons from a remote s...

Malicious code in journey-test-hellospy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 418fea1fe789e9a44c77c08c9135b3da66b773882c9fb2757094c3f55b04321b During installation, package exfiltrates potentially sensitive environmental variables --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

MAL-2026-18133 Malicious code in journey-test-hellospy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 418fea1fe789e9a44c77c08c9135b3da66b773882c9fb2757094c3f55b04321b During installation, package exfiltrates potentially sensitive environmental variables --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

MAL-2026-18126 Malicious code in zzhelloworld_socktest (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4344ab16d08a7e38ea2f32b406453f86d792c0fa17103125ad84ffd0e39c187f On require "zzhelloworldsocktest", the library's top-level module body opens a TCP connection to the hardcoded remote endpoint 66.78.40.218:32768,...

Malicious code in zzhelloworld_socktest (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4344ab16d08a7e38ea2f32b406453f86d792c0fa17103125ad84ffd0e39c187f On require "zzhelloworldsocktest", the library's top-level module body opens a TCP connection to the hardcoded remote endpoint 66.78.40.218:32768,...

Malicious code in journey-test-helloshell (PyPI)

Source: kam193 bdf4549e34df1c1c7dfd704454011cf0a26ea5807948e917d7bc65f130182fc9 In specific environments, package starts a reverse shell during installation. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-journey-test-helloshell Reasons...