GHSA-7R86-CG39-JMMJ vulnerabilities

Vulnerabilities for packages: prism, argo-workflows, renovate, vitess, serve, eslint, code-server, opensearch-dashboards, node-gyp, saf, ts-patch, py3-jupyterlab, pulumi, tileserver-gl, lerna, pnpm-stage0, npm, kubeflow-katib...

GHSA-23C5-XMQV-RM74 vulnerabilities

Vulnerabilities for packages: argo-workflows, pulumi, tileserver-gl, pnpm-stage0, npm, prism, code-server, ts-patch, kubeflow-centraldashboard, vitess, renovate, py3-jupyterlab, serve, eslint, opensearch-dashboards, node-gyp, saf, lerna, kubeflow-katib...

CVE-2026-27699 vulnerabilities

Vulnerabilities for packages: code-server, opensearch-dashboards, langfuse...

CVE-2026-27903 vulnerabilities

Vulnerabilities for packages: prism, argo-workflows, renovate, vitess, serve, eslint, code-server, opensearch-dashboards, node-gyp, saf, ts-patch, py3-jupyterlab, pulumi, tileserver-gl, lerna, pnpm-stage0, npm, kubeflow-katib...

CVE-2026-27904 vulnerabilities

Vulnerabilities for packages: argo-workflows, pulumi, tileserver-gl, pnpm-stage0, npm, prism, code-server, ts-patch, kubeflow-centraldashboard, vitess, renovate, py3-jupyterlab, serve, eslint, opensearch-dashboards, node-gyp, saf, lerna, kubeflow-katib...

GHSA-5RQ4-664W-9X2C vulnerabilities

Vulnerabilities for packages: code-server, opensearch-dashboards, langfuse...

GHSA-7R86-CG39-JMMJ vulnerabilities

Vulnerabilities for packages: graalvm, librechat, pnpm-stage0, vitess, serve, tileserver-gl, argo-workflows, lerna, tensorflow-cpu-jupyter, authentik, renovate, npm, langfuse, actions-runner, ts-patch, tileserver-gl-fips, pulumi, prism, opensearch-dashboards, py3-jupyterlab, wazuh-dashboard,...

CVE-2026-27903 vulnerabilities

Vulnerabilities for packages: graalvm, librechat, pnpm-stage0, vitess, serve, tileserver-gl, argo-workflows, lerna, tensorflow-cpu-jupyter, authentik, renovate, npm, langfuse, actions-runner, ts-patch, tileserver-gl-fips, pulumi, prism, opensearch-dashboards, py3-jupyterlab, wazuh-dashboard,...

GHSA-5RQ4-664W-9X2C vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, code-server, langfuse, opensearch-dashboards-fips, kibana...

CVE-2026-27904 vulnerabilities

Vulnerabilities for packages: graalvm, librechat, pnpm-stage0, vitess, serve, tileserver-gl, argo-workflows, lerna, tensorflow-cpu-jupyter, authentik, renovate, npm, langfuse, actions-runner, ts-patch, tileserver-gl-fips, pulumi, prism, opensearch-dashboards, py3-jupyterlab, wazuh-dashboard,...

CVE-2026-27699 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, code-server, langfuse, opensearch-dashboards-fips, kibana...

GHSA-23C5-XMQV-RM74 vulnerabilities

Vulnerabilities for packages: graalvm, librechat, pnpm-stage0, vitess, serve, tileserver-gl, argo-workflows, lerna, tensorflow-cpu-jupyter, authentik, renovate, npm, langfuse, actions-runner, ts-patch, tileserver-gl-fips, pulumi, prism, opensearch-dashboards, py3-jupyterlab, wazuh-dashboard,...

GHSA-G9MF-H72J-4RW9 vulnerabilities

Vulnerabilities for packages: renovate, code-server, langfuse, jitsucom-jitsu...

CVE-2026-22036 vulnerabilities

Vulnerabilities for packages: renovate, code-server, langfuse, jitsucom-jitsu...

GHSA-G9MF-H72J-4RW9 vulnerabilities

Vulnerabilities for packages: gemini-cli, renovate, langfuse-fips, librechat, code-server, langfuse, kibana, jitsucom-jitsu...

CVE-2026-22036 vulnerabilities

Vulnerabilities for packages: gemini-cli, renovate, langfuse-fips, librechat, code-server, langfuse, kibana, jitsucom-jitsu...

CVE-2023-49788

Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated Collabora Online server, the Built-in CODE Server richdocumentscode is run without chroot sandboxing. Vulnerable versions of the richdocumentscode app can be susceptible to attac...

CVE-2025-66208

Collabora Online - Built-in CODE Server richdocumentscode provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE OS Command Injection in richdocumentscode proxy. Users of Nextclou...

CVE-2025-66208 Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy

Collabora Online - Built-in CODE Server richdocumentscode provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE OS Command Injection in richdocumentscode proxy. Users of Nextclou...

CVE-2025-66208

CVE-2025-66208 affects Collabora Online – Built-in CODE Server (richdocumentscode proxy). The vulnerability is a configuration-dependent OS command injection (RCE) in the richdocumentscode proxy present in versions prior to 25.04.702, exploitable by attackers via proxy.php and an intermediate rev...