Skip to content

Vendor

updatecli vulnerabilities

1 published CVE affecting updatecli, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of updatecli alerts

Products

Latest updatecli CVEs

Newest publication first

  1. CVE-2025-24355 Updatecli exposes Maven credentials in console output

    HighCVSS 7.1

    Summary Private maven repository credentials leaked in application logs in case of unsuccessful retrieval operation. Details During the execution of an updatecli pipeline which contains a maven source configured with basic auth credentials, the credentials are being leaked in the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.