CLEANSTART-2026-QN62418 Security fixes in opensearch-dashboards-fips 3.5.0-r0

🗓️ 30 Jul 2026 07:10:53Reported by GoogleType

osv

osv🔗 osv.dev👁 5 Views

Security fixes in opensearch-dashboards-fips 3.5.0-r0 address 30 vulnerabilities.

Reporter	Title	Published	Views	Family All 1067
vulnersOsv	org.webjars.npm:directory-encoder (=0.9.2), org.webjars.npm:engine-handlebars (=0.8.2) +6 more potentially affected by CVE-2026-33941 via org.webjars.npm:handlebars (>=4.0.14 <=4.7.8)	27 Mar 202618:22	–	vulnersosv
vulnersOsv	com.gitee.zodiacstack.base:zodiac-base-sdk-net (=1.7.1), com.matecoder:juggle-core (>=1.6.0 <=1.6.1) +27 more potentially affected by CVE-2026-33750 via org.webjars.npm:brace-expansion (=2.0.2)	26 Mar 202618:29	–	vulnersosv
vulnersOsv	4coders-commons (>=0.0.1 <=0.0.2), @11ty/eleventy (=0.3.3) +3644 more potentially affected by CVE-2021-23369 +2 more via handlebars (>=4.0.0 <=4.7.8)	26 Mar 202622:20	–	vulnersosv
vulnersOsv	4coders-commons (>=0.0.1 <=0.0.2), @11ty/eleventy (=0.3.3) +3644 more potentially affected by CVE-2026-33939 via handlebars (>=4.0.0 <=4.7.8)	27 Mar 202618:21	–	vulnersosv
vulnersOsv	jo-cli (=1.0.2) potentially affected by CVE-2026-33750 via brace-expansion (=3.0.0)	26 Mar 202618:29	–	vulnersosv
vulnersOsv	org.webjars.npm:angular-devkit__architect (=0.1902.8), org.webjars.npm:angular-devkit__core (>=15.2.0-next.3 <=19.2.8) +2 more potentially affected by CVE-2025-69873 via org.webjars.npm:ajv (>=8.12.0 <=8.17.1)	11 Feb 202600:00	–	vulnersosv
vulnersOsv	copy-text (>=2.0.1 <=2.1.2), cypherquery (>=1.1.8 <=1.1.13) +1 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0 <=4.0.2)	31 Mar 202623:02	–	vulnersosv
vulnersOsv	@10xsai/cloudflare-router-nx-plugin (=1.0.0), @4itech/schematics (>=11.7.1 <=11.7.6) +977 more potentially affected by CVE-2026-33671 via picomatch (>=4.0.1 <=4.0.3)	25 Mar 202621:12	–	vulnersosv
vulnersOsv	4itech-schematics (>=11.0.0 <=11.3.0-1), @142vip/midway (>=0.1.6-alpha.2 <=0.1.6-alpha.12) +572 more potentially affected by CVE-2026-33671 via picomatch (>=1.2.0 <=2.3.1)	25 Mar 202621:12	–	vulnersosv
vulnersOsv	4game-support-ckeditor5-custom-build (>=0.0.1 <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3 <=0.0.5) +5462 more potentially affected by CVE-2025-13465 +1 more via lodash-es (>=4.0.0 <=4.18.0)	31 Mar 202623:02	–	vulnersosv

Source	Link
opensearch	www.opensearch.org/

02 Aug 2026 01:35Current

7.5High risk

Vulners AI Score7.5

CVSS 3.19.8

CVSS 48.7

EPSS0.02566

SSVC

opensearch dashboards security fixes vulnerabilities addressed software update