GHSA-23C5-XMQV-RM74 vulnerabilities

Vulnerabilities for packages: saf, lerna, renovate, node-gyp, eslint, kubeflow-centraldashboard, pnpm-stage0, kubeflow-katib, ts-patch, npm, py3-jupyterlab, serve, opensearch-dashboards, code-server, pulumi, argo-workflows, tileserver-gl, prism, vitess...

GHSA-7R86-CG39-JMMJ vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, pnpm-stage0, serve, kubeflow-katib, ts-patch, opensearch-dashboards, saf, npm, code-server, lerna, pulumi, renovate, argo-workflows, tileserver-gl, prism, eslint, vitess, node-gyp...

CVE-2026-27699 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse, code-server...

CVE-2026-27903 vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, pnpm-stage0, serve, kubeflow-katib, ts-patch, opensearch-dashboards, saf, npm, code-server, lerna, pulumi, renovate, argo-workflows, tileserver-gl, prism, eslint, vitess, node-gyp...

CVE-2026-27904 vulnerabilities

Vulnerabilities for packages: saf, lerna, renovate, node-gyp, eslint, kubeflow-centraldashboard, pnpm-stage0, kubeflow-katib, ts-patch, npm, py3-jupyterlab, serve, opensearch-dashboards, code-server, pulumi, argo-workflows, tileserver-gl, prism, vitess...

GHSA-5RQ4-664W-9X2C vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse, code-server...

GHSA-5RQ4-664W-9X2C vulnerabilities

Vulnerabilities for packages: code-server, langfuse-fips, kibana, opensearch-dashboards, opensearch-dashboards-fips, langfuse...

CVE-2026-27903 vulnerabilities

Vulnerabilities for packages: arangodb, tensorflow-cpu-jupyter, saf, serve, eslint, opensearch-dashboards-fips, renovate, drupal, pulumi, kubeflow-katib, argo-workflows, wazuh-dashboard, vitess, librechat, pnpm-stage0, code-server, tileserver-gl-fips, node-gyp, gitlab-rails-ce-fips,...

GHSA-7R86-CG39-JMMJ vulnerabilities

Vulnerabilities for packages: arangodb, tensorflow-cpu-jupyter, saf, serve, eslint, opensearch-dashboards-fips, renovate, drupal, pulumi, kubeflow-katib, argo-workflows, wazuh-dashboard, vitess, librechat, pnpm-stage0, code-server, tileserver-gl-fips, node-gyp, gitlab-rails-ce-fips,...

CVE-2026-27904 vulnerabilities

Vulnerabilities for packages: arangodb, tensorflow-cpu-jupyter, saf, serve, eslint, opensearch-dashboards-fips, renovate, drupal, pulumi, kubeflow-centraldashboard, kubeflow-katib, argo-workflows, wazuh-dashboard, vitess, librechat, pnpm-stage0, code-server, tileserver-gl-fips, node-gyp,...

CVE-2026-27699 vulnerabilities

Vulnerabilities for packages: code-server, langfuse-fips, kibana, opensearch-dashboards, opensearch-dashboards-fips, langfuse...

GHSA-23C5-XMQV-RM74 vulnerabilities

Vulnerabilities for packages: arangodb, tensorflow-cpu-jupyter, saf, serve, eslint, opensearch-dashboards-fips, renovate, drupal, pulumi, kubeflow-centraldashboard, kubeflow-katib, argo-workflows, wazuh-dashboard, vitess, librechat, pnpm-stage0, code-server, tileserver-gl-fips, node-gyp,...

CVE-2026-22036 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse, renovate, code-server...

GHSA-G9MF-H72J-4RW9 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse, renovate, code-server...

GHSA-G9MF-H72J-4RW9 vulnerabilities

Vulnerabilities for packages: code-server, langfuse-fips, jitsucom-jitsu, librechat, kibana, gemini-cli, renovate, langfuse...

CVE-2026-22036 vulnerabilities

Vulnerabilities for packages: code-server, langfuse-fips, jitsucom-jitsu, librechat, kibana, gemini-cli, renovate, langfuse...

CVE-2023-49788

Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated Collabora Online server, the Built-in CODE Server richdocumentscode is run without chroot sandboxing. Vulnerable versions of the richdocumentscode app can be susceptible to attac...

CVE-2025-66208

Collabora Online - Built-in CODE Server richdocumentscode provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE OS Command Injection in richdocumentscode proxy. Users of Nextclou...

CVE-2025-66208 Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy

Collabora Online - Built-in CODE Server richdocumentscode provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE OS Command Injection in richdocumentscode proxy. Users of Nextclou...

CVE-2025-66208 Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy

Collabora Online - Built-in CODE Server richdocumentscode provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE OS Command Injection in richdocumentscode proxy. Users of Nextclou...