271 matches found
CVE-2026-84890 vulnerabilities
Vulnerabilities for packages: code-server, node-gyp, lerna, prism...
CVE-2026-85008 vulnerabilities
Vulnerabilities for packages: code-server, node-gyp, lerna, prism...
GHSA-4MJR-XMP4-GH2G vulnerabilities
Vulnerabilities for packages: dotstatsuite-supercore, gitlab-rails-ce, code-server, arangodb, opensearch-dashboards-fips, langfuse, kubescape-grype-offline-db, azurite, tensorflow-gpu-jupyter, json-server, argo-workflows, wazuh-dashboard-fips, opensearch-dashboards, jupyter-base-notebook, renovat...
GHSA-X5FP-WJ9C-MXMX vulnerabilities
Vulnerabilities for packages: dotstatsuite-supercore, gitlab-rails-ce, code-server, arangodb, opensearch-dashboards-fips, langfuse, kubescape-grype-offline-db, azurite, json-server, argo-workflows, wazuh-dashboard-fips, opensearch-dashboards, renovate, commercial-gitlab-rails-ee, unleash,...
CVE-2026-82562 vulnerabilities
Vulnerabilities for packages: argo-workflows, opensearch-dashboards, langfuse, json-server, tileserver-gl, code-server, renovate, sqlpad, prism, kubeflow-centraldashboard...
CVE-2026-82417 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, argo-workflows, opensearch-dashboards, langfuse, json-server, tileserver-gl, code-server, renovate, sqlpad, prism, kubeflow-centraldashboard...
GHSA-4MJR-XMP4-GH2G vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, argo-workflows, opensearch-dashboards, langfuse, json-server, tileserver-gl, code-server, renovate, sqlpad, prism, kubeflow-centraldashboard...
GHSA-X5FP-WJ9C-MXMX vulnerabilities
Vulnerabilities for packages: argo-workflows, opensearch-dashboards, langfuse, json-server, tileserver-gl, code-server, renovate, sqlpad, prism, kubeflow-centraldashboard...
CVE-2026-73566 vulnerabilities
Vulnerabilities for packages: saf, jupyter-base-notebook, opensearch-dashboards, lerna, pulumi, npm, code-server, renovate, sqlpad, node-gyp, prism, kubeflow-centraldashboard...
JLSEC-2026-1274 code-server's session cookie can be extracted by having user visit specially crafted proxy URL
Summary A maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Details Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL https:///proxy/[email protected]/path would be...
PT-2026-80516
Summary A maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Details Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL https:///proxy/[email protected]/path would be...
CVE-2026-54272 vulnerabilities
Vulnerabilities for packages: saf, opensearch-dashboards, langfuse, lerna, pulumi, npm, code-server, renovate, sqlpad, prism, kubeflow-pipelines...
GHSA-4XRF-JV44-H6HH vulnerabilities
Vulnerabilities for packages: saf, opensearch-dashboards, langfuse, lerna, pulumi, npm, code-server, renovate, sqlpad, prism, kubeflow-pipelines...
CVE-2026-69198 vulnerabilities
Vulnerabilities for packages: saf, opensearch-dashboards, langfuse, lerna, pulumi, npm, code-server, renovate, sqlpad, prism, kubeflow-pipelines...
GHSA-MWP4-54F8-5FHR vulnerabilities
Vulnerabilities for packages: saf, opensearch-dashboards, langfuse, lerna, pulumi, npm, code-server, renovate, sqlpad, prism, kubeflow-pipelines...
GHSA-22JQ-VG5J-6VGG vulnerabilities
Vulnerabilities for packages: saf, opensearch-dashboards, langfuse, lerna, pulumi, npm, code-server, renovate, sqlpad, prism, kubeflow-pipelines...
CVE-2026-69192 vulnerabilities
Vulnerabilities for packages: saf, opensearch-dashboards, langfuse, lerna, pulumi, npm, code-server, renovate, sqlpad, prism, kubeflow-pipelines...
CVE-2026-14643 vulnerabilities
Vulnerabilities for packages: langfuse-fips, kibana, commercial-gitlab-rails-ee-fips, vitess, code-server, renovate, pelias-api, commercial-gitlab-rails-ee, langfuse...