SUSE CVE-2026-111079

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data-such as API tokens,...

CVE-2026-111079

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

CVE-2026-111079 Goose: goose: shell history and environment leak via terminal integration

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

CVE-2026-111079 Goose: goose: shell history and environment leak via terminal integration

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

EUVD-2026-108113

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

CVE-2026-111079

A vulnerability exists in Goose where the terminal integration feature captures shell command history and transmits it verbatim to Large Language Model (LLM) provider endpoints without sanitization. If a user inputs sensitive data such as API tokens, passwords, or environment variables , this inf...

CVE-2026-111079

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

Red Hat: CVE-2026-111079: goose: goose: Shell History and Environment Leak via Terminal Integration

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

PT-2026-121335

Name of the Vulnerable Software and Affected Versions Goose affected versions not specified Description A flaw exists when the terminal integration feature is enabled, causing the application to capture shell command history and send it without sanitization to configured Large Language Model LLM...

Linux Distros Unpatched Vulnerability : CVE-2026-111079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without...

[SECURITY] Fedora 41 Update: gh-2.74.0-1.fc41

A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...

[SECURITY] Fedora 42 Update: gh-2.74.0-1.fc42

A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...

MAL-2022-4059 Malicious code in js-lib-terminal-integration-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7503515ab3ea4e66d9467dc8c42af202ce8dd2018894ccd7c17399898d6a5f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4058 Malicious code in js-lib-terminal-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dcf2e5bf15d9675a00d7528be2775ff89da7335da5ba9321cdbb19d9cb9f76c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in js-lib-terminal-integration-example

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in js-lib-terminal-integration

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in js-lib-terminal-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dcf2e5bf15d9675a00d7528be2775ff89da7335da5ba9321cdbb19d9cb9f76c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in js-lib-terminal-integration-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7503515ab3ea4e66d9467dc8c42af202ce8dd2018894ccd7c17399898d6a5f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...