GHSA-2GQQ-GQF2-X968 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

GHSA-8436-99HF-9MMV vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

GHSA-2JFJ-6HJV-FM6J vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

GHSA-3XPG-4RPP-HHHM vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

GHSA-W293-VG96-WGC3 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

GHSA-RX4F-C7P8-82VQ vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

CVE-2026-85014 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

CVE-2026-84890 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

CVE-2026-84947 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

CVE-2026-84961 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

CVE-2026-84933 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

CVE-2026-85008 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: prism, dotstatsuite-supercore, pelias-api, gitlab-rails-ce, kubescape-grype-offline-db, langfuse, unleash-proxy, renovate, arangodb, tileserver-gl, argo-workflows, wazuh-dashboard, unleash, langfuse-fips, gitlab-rails-ce-fips, azurite, unleash-fips,...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: prism, dotstatsuite-supercore, pelias-api, gitlab-rails-ce, kubescape-grype-offline-db, langfuse, unleash-proxy, renovate, arangodb, tileserver-gl, argo-workflows, wazuh-dashboard, unleash, langfuse-fips, gitlab-rails-ce-fips, tensorflow-gpu-jupyter, azurite,...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: code-server, json-server, langfuse, argo-workflows, opensearch-dashboards, tileserver-gl, prism, renovate, kubeflow-centraldashboard, sqlpad...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: code-server, json-server, langfuse, argo-workflows, opensearch-dashboards, tileserver-gl, prism, renovate, kubeflow-centraldashboard, sqlpad...

CVE-2026-82417 vulnerabilities

Vulnerabilities for packages: code-server, json-server, langfuse, argo-workflows, opensearch-dashboards, tileserver-gl, prism, renovate, kubeflow-centraldashboard, sqlpad...

CVE-2026-82562 vulnerabilities

Vulnerabilities for packages: code-server, json-server, langfuse, argo-workflows, opensearch-dashboards, tileserver-gl, prism, renovate, kubeflow-centraldashboard, sqlpad...

CVE-2026-73566 vulnerabilities

Vulnerabilities for packages: code-server, sqlpad, saf, npm, opensearch-dashboards, node-gyp, prism, lerna, renovate, kubeflow-centraldashboard, pulumi...

JLSEC-2026-1274 code-server's session cookie can be extracted by having user visit specially crafted proxy URL

Summary A maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Details Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL https:///proxy/[email protected]/path would be...