172 matches found
JLSEC-2026-1274 code-server's session cookie can be extracted by having user visit specially crafted proxy URL
Summary A maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Details Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL https:///proxy/[email protected]/path would be...
GHSA-22JQ-VG5J-6VGG vulnerabilities
Vulnerabilities for packages: langfuse, pulumi, code-server, lerna, npm, opensearch-dashboards, prism, kubeflow-pipelines, sqlpad, renovate...
CVE-2026-69192 vulnerabilities
Vulnerabilities for packages: langfuse, pulumi, code-server, lerna, npm, opensearch-dashboards, prism, kubeflow-pipelines, sqlpad, renovate...
CVE-2026-54272 vulnerabilities
Vulnerabilities for packages: langfuse, pulumi, code-server, lerna, npm, opensearch-dashboards, prism, kubeflow-pipelines, sqlpad, renovate...
CVE-2026-69198 vulnerabilities
Vulnerabilities for packages: langfuse, pulumi, code-server, lerna, npm, opensearch-dashboards, prism, kubeflow-pipelines, sqlpad, renovate...
GHSA-4XRF-JV44-H6HH vulnerabilities
Vulnerabilities for packages: langfuse, pulumi, code-server, lerna, npm, opensearch-dashboards, prism, kubeflow-pipelines, sqlpad, renovate...
GHSA-MWP4-54F8-5FHR vulnerabilities
Vulnerabilities for packages: langfuse, pulumi, code-server, lerna, npm, opensearch-dashboards, prism, kubeflow-pipelines, sqlpad, renovate...
CVE-2026-14643 vulnerabilities
Vulnerabilities for packages: code-server, pelias-api, langfuse, kibana, vitess, langfuse-fips, renovate...
GHSA-JR45-8VMC-QM54 vulnerabilities
Vulnerabilities for packages: code-server, pelias-api, langfuse, kibana, vitess, langfuse-fips, renovate...
CVE-2026-15157 vulnerabilities
Vulnerabilities for packages: langfuse, pulumi, code-server, npm, prism, vitess, renovate...
GHSA-8XCM-R25X-G524 vulnerabilities
Vulnerabilities for packages: langfuse, pulumi, code-server, npm, prism, vitess, renovate...
GHSA-JR45-8VMC-QM54 vulnerabilities
Vulnerabilities for packages: renovate, code-server, vitess, langfuse...
CVE-2026-16729 vulnerabilities
Vulnerabilities for packages: langfuse, pulumi, code-server, npm, prism, vitess, renovate...
GHSA-M8RV-5G2X-5CG5 vulnerabilities
Vulnerabilities for packages: langfuse, pulumi, code-server, npm, prism, vitess, renovate...
CVE-2026-14643 vulnerabilities
Vulnerabilities for packages: renovate, code-server, vitess, langfuse...
CVE-2026-16728 vulnerabilities
Vulnerabilities for packages: langfuse, pulumi, code-server, npm, prism, vitess, renovate...
GHSA-4CWX-7WF7-3272 vulnerabilities
Vulnerabilities for packages: renovate, code-server, vitess, langfuse...
CVE-2026-13697 vulnerabilities
Vulnerabilities for packages: renovate, code-server, vitess, langfuse...