135 matches found
GHSA-27R3-JXMH-P828 vulnerabilities
Vulnerabilities for packages: langfuse, verdaccio, http-https-echo, unleash-proxy, eco-jess, pelias-api, json-server, opensearch-dashboards-fips, arangodb, dotstatsuite-supercore, gemini-cli, opensearch-dashboards, kubeflow-centraldashboard, tileserver-gl, thingsboard, http-https-echo-fips,...
GHSA-WJR9-J795-JXCR vulnerabilities
Vulnerabilities for packages: verdaccio, unleash-proxy, gitlab-rails-ce, keep-fips, renovate, eco-jess, keep, supabase-storage-api-fips, opensearch-dashboards-fips, yaml-language-server, arangodb, opensearch-dashboards, tileserver-gl, gitlab-rails-ce-fips, serve, nextcloud-server,...
CVE-2026-111181 vulnerabilities
Vulnerabilities for packages: langfuse, verdaccio, http-https-echo, unleash-proxy, eco-jess, pelias-api, json-server, opensearch-dashboards-fips, arangodb, dotstatsuite-supercore, gemini-cli, opensearch-dashboards, kubeflow-centraldashboard, tileserver-gl, thingsboard, http-https-echo-fips,...
GHSA-333X-W4R6-6CRP vulnerabilities
Vulnerabilities for packages: verdaccio, unleash-proxy, gitlab-rails-ce, keep-fips, renovate, eco-jess, keep, supabase-storage-api-fips, opensearch-dashboards-fips, yaml-language-server, arangodb, opensearch-dashboards, tileserver-gl, gitlab-rails-ce-fips, serve, nextcloud-server,...
GHSA-W74X-V6F9-J3XG vulnerabilities
Vulnerabilities for packages: verdaccio, unleash-proxy, gitlab-rails-ce, keep-fips, renovate, eco-jess, keep, supabase-storage-api-fips, opensearch-dashboards-fips, yaml-language-server, arangodb, opensearch-dashboards, tileserver-gl, gitlab-rails-ce-fips, serve, nextcloud-server,...
GHSA-XHQ7-XMQJ-769H vulnerabilities
Vulnerabilities for packages: verdaccio, unleash-proxy, gitlab-rails-ce, keep-fips, renovate, eco-jess, keep, supabase-storage-api-fips, opensearch-dashboards-fips, yaml-language-server, arangodb, opensearch-dashboards, tileserver-gl, gitlab-rails-ce-fips, serve, nextcloud-server,...
CVE-2026-110180 vulnerabilities
Vulnerabilities for packages: verdaccio, unleash-proxy, gitlab-rails-ce, keep-fips, renovate, eco-jess, keep, supabase-storage-api-fips, opensearch-dashboards-fips, yaml-language-server, arangodb, opensearch-dashboards, tileserver-gl, gitlab-rails-ce-fips, serve, nextcloud-server,...
CVE-2026-110725 vulnerabilities
Vulnerabilities for packages: verdaccio, unleash-proxy, gitlab-rails-ce, keep-fips, renovate, eco-jess, keep, supabase-storage-api-fips, opensearch-dashboards-fips, yaml-language-server, arangodb, opensearch-dashboards, tileserver-gl, gitlab-rails-ce-fips, serve, nextcloud-server,...
CVE-2026-110306 vulnerabilities
Vulnerabilities for packages: verdaccio, unleash-proxy, gitlab-rails-ce, keep-fips, renovate, eco-jess, keep, supabase-storage-api-fips, opensearch-dashboards-fips, yaml-language-server, arangodb, opensearch-dashboards, tileserver-gl, gitlab-rails-ce-fips, serve, nextcloud-server,...
CVE-2026-110095 vulnerabilities
Vulnerabilities for packages: verdaccio, unleash-proxy, gitlab-rails-ce, keep-fips, renovate, eco-jess, keep, supabase-storage-api-fips, opensearch-dashboards-fips, yaml-language-server, arangodb, opensearch-dashboards, tileserver-gl, gitlab-rails-ce-fips, serve, nextcloud-server,...
GO-2026-6609 vulnerabilities
Vulnerabilities for packages: filebrowser, juicefs, headlamp, kyverno-policy-reporter-ui, grafana-pyroscope, terragrunt, prometheus-adapter, cert-manager, mesosphere-vsphere-csi, yunikorn-web, chartmuseum, rancher, grafana, grafana-alloy, loki, rancher-agent, argo-workflows, gitlab-pages,...
GHSA-F4XW-M386-M277 vulnerabilities
Vulnerabilities for packages: filebrowser, juicefs, headlamp, kyverno-policy-reporter-ui, grafana-pyroscope, terragrunt, prometheus-adapter, cert-manager, mesosphere-vsphere-csi, yunikorn-web, chartmuseum, rancher, grafana, grafana-alloy, loki, rancher-agent, argo-workflows, gitlab-pages,...
GO-2026-6497 vulnerabilities
Vulnerabilities for packages: k9s, kargo, flux-helm-controller, gitness, opentofu, k8sgpt, helm-push, kube-arangodb, manifest-tool, helm-set-status, maru, xeol, cert-manager-cmctl, helm-mapkubeapis, kyverno-notation-aws, rancher-helm, cluster-api-helm-controller...
GO-2026-6499 vulnerabilities
Vulnerabilities for packages: k9s, kargo, flux-helm-controller, gitness, opentofu, k8sgpt, helm-push, kube-arangodb, manifest-tool, helm-set-status, maru, xeol, cert-manager-cmctl, helm-mapkubeapis, kyverno-notation-aws, rancher-helm, cluster-api-helm-controller...
CVE-2026-85062 vulnerabilities
Vulnerabilities for packages: arangodb, vitess, gitlab-rails-ce, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips...
GHSA-2WM5-Q62R-HMRV vulnerabilities
Vulnerabilities for packages: arangodb, vitess, gitlab-rails-ce, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips...
WS-2026-0070
ArangoDB unauthenticated authentication bypass through inconsistent raw versus decoded URL handling. With the default --server.authentication-system-only, CommTask::canAccessPath tested the raw request path, so a URL-encoded underscore such as /%5Fapi/... failed the path1 != '' system-path test,...
WS-2026-0071
ArangoDB privilege escalation via the isSystem task flag. RestTasksHandler read isSystem from the POST /api/tasks request body and passed it straight to Task::createTask with no privilege check, letting a database user with write permissions schedule a JavaScript task that runs in a privileged...