271 matches found
CVE-2026-84933 vulnerabilities
Vulnerabilities for packages: code-server, lerna, node-gyp, prism...
CVE-2026-85008 vulnerabilities
Vulnerabilities for packages: code-server, lerna, node-gyp, prism...
GHSA-4MJR-XMP4-GH2G vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, tileserver-gl-fips, wazuh-dashboard-fips, unleash-fips, tileserver-gl, unleash, kubescape-grype-offline-db, renovate, tensorflow-gpu-jupyter, langfuse, unleash-proxy, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips,...
GHSA-X5FP-WJ9C-MXMX vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, tileserver-gl-fips, wazuh-dashboard-fips, unleash-fips, tileserver-gl, unleash, kubescape-grype-offline-db, renovate, langfuse, unleash-proxy, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips, pelias-api,...
CVE-2026-82417 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, jupyter-base-notebook, json-server, tileserver-gl, code-server, renovate, langfuse, prism, argo-workflows, sqlpad, opensearch-dashboards...
CVE-2026-82562 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, json-server, tileserver-gl, code-server, renovate, langfuse, prism, argo-workflows, sqlpad, opensearch-dashboards...
GHSA-4MJR-XMP4-GH2G vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, jupyter-base-notebook, json-server, tileserver-gl, code-server, renovate, langfuse, prism, argo-workflows, sqlpad, opensearch-dashboards...
GHSA-X5FP-WJ9C-MXMX vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, json-server, tileserver-gl, code-server, renovate, langfuse, prism, argo-workflows, sqlpad, opensearch-dashboards...
CVE-2026-73566 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, jupyter-base-notebook, code-server, renovate, prism, pulumi, lerna, npm, node-gyp, saf, sqlpad, opensearch-dashboards...
JLSEC-2026-1274 code-server's session cookie can be extracted by having user visit specially crafted proxy URL
Summary A maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Details Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL https:///proxy/[email protected]/path would be...
PT-2026-80516
Summary A maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Details Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL https:///proxy/[email protected]/path would be...
GHSA-22JQ-VG5J-6VGG vulnerabilities
Vulnerabilities for packages: code-server, renovate, langfuse, prism, pulumi, kubeflow-pipelines, lerna, npm, saf, sqlpad, opensearch-dashboards...
CVE-2026-54272 vulnerabilities
Vulnerabilities for packages: code-server, renovate, langfuse, prism, pulumi, kubeflow-pipelines, lerna, npm, saf, sqlpad, opensearch-dashboards...
CVE-2026-69192 vulnerabilities
Vulnerabilities for packages: code-server, renovate, langfuse, prism, pulumi, kubeflow-pipelines, lerna, npm, saf, sqlpad, opensearch-dashboards...
GHSA-4XRF-JV44-H6HH vulnerabilities
Vulnerabilities for packages: code-server, renovate, langfuse, prism, pulumi, kubeflow-pipelines, lerna, npm, saf, sqlpad, opensearch-dashboards...
GHSA-MWP4-54F8-5FHR vulnerabilities
Vulnerabilities for packages: code-server, renovate, langfuse, prism, pulumi, kubeflow-pipelines, lerna, npm, saf, sqlpad, opensearch-dashboards...
CVE-2026-69198 vulnerabilities
Vulnerabilities for packages: code-server, renovate, langfuse, prism, pulumi, kubeflow-pipelines, lerna, npm, saf, sqlpad, opensearch-dashboards...
CVE-2026-14643 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, vitess, pelias-api, langfuse, code-server, langfuse-fips, commercial-gitlab-rails-ee, renovate, kibana...