GHSA-23C5-XMQV-RM74 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, code-server, pnpm-stage0, serve, npm, renovate, lerna, opensearch-dashboards, ts-patch, node-gyp, eslint, py3-jupyterlab, saf, prism, argo-workflows, vitess, tileserver-gl, kubeflow-katib, pulumi...

GHSA-7R86-CG39-JMMJ vulnerabilities

Vulnerabilities for packages: code-server, eslint, py3-jupyterlab, saf, vitess, lerna, tileserver-gl, opensearch-dashboards, pnpm-stage0, prism, argo-workflows, serve, ts-patch, kubeflow-katib, npm, renovate, node-gyp, pulumi...

CVE-2026-27903 vulnerabilities

Vulnerabilities for packages: code-server, eslint, py3-jupyterlab, saf, vitess, lerna, tileserver-gl, opensearch-dashboards, pnpm-stage0, prism, argo-workflows, serve, ts-patch, kubeflow-katib, npm, renovate, node-gyp, pulumi...

CVE-2026-27699 vulnerabilities

Vulnerabilities for packages: langfuse, code-server, opensearch-dashboards...

GHSA-5RQ4-664W-9X2C vulnerabilities

Vulnerabilities for packages: langfuse, code-server, opensearch-dashboards...

CVE-2026-27904 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, code-server, pnpm-stage0, serve, npm, renovate, lerna, opensearch-dashboards, ts-patch, node-gyp, eslint, py3-jupyterlab, saf, prism, argo-workflows, vitess, tileserver-gl, kubeflow-katib, pulumi...

GHSA-5RQ4-664W-9X2C vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, kibana, code-server, langfuse, opensearch-dashboards, langfuse-fips...

GHSA-7R86-CG39-JMMJ vulnerabilities

Vulnerabilities for packages: pulumi, opensearch-dashboards-fips, langfuse, node-gyp, npm, opentelemetry-auto-instrumentations-node, drupal, renovate, actions-runner, lerna, gitlab-rails-ce-fips, emscripten, librechat, code-server, pnpm-stage0, eslint, authentik-fips, bash-language-server,...

CVE-2026-27903 vulnerabilities

Vulnerabilities for packages: pulumi, opensearch-dashboards-fips, langfuse, node-gyp, npm, opentelemetry-auto-instrumentations-node, drupal, renovate, actions-runner, lerna, gitlab-rails-ce-fips, emscripten, librechat, code-server, pnpm-stage0, eslint, authentik-fips, bash-language-server,...

CVE-2026-27904 vulnerabilities

Vulnerabilities for packages: pulumi, opensearch-dashboards-fips, langfuse, node-gyp, npm, opentelemetry-auto-instrumentations-node, drupal, renovate, actions-runner, lerna, gitlab-rails-ce-fips, emscripten, librechat, code-server, pnpm-stage0, eslint, authentik-fips, bash-language-server,...

CVE-2026-27699 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, kibana, code-server, langfuse, opensearch-dashboards, langfuse-fips...

GHSA-23C5-XMQV-RM74 vulnerabilities

Vulnerabilities for packages: pulumi, opensearch-dashboards-fips, langfuse, node-gyp, npm, opentelemetry-auto-instrumentations-node, drupal, renovate, actions-runner, lerna, gitlab-rails-ce-fips, emscripten, librechat, code-server, pnpm-stage0, eslint, authentik-fips, bash-language-server,...

CVE-2026-22036 vulnerabilities

Vulnerabilities for packages: langfuse, code-server, renovate, jitsucom-jitsu...

GHSA-G9MF-H72J-4RW9 vulnerabilities

Vulnerabilities for packages: langfuse, code-server, renovate, jitsucom-jitsu...

GHSA-G9MF-H72J-4RW9 vulnerabilities

Vulnerabilities for packages: kibana, librechat, code-server, langfuse, renovate, jitsucom-jitsu, langfuse-fips, gemini-cli...

CVE-2026-22036 vulnerabilities

Vulnerabilities for packages: kibana, librechat, code-server, langfuse, renovate, jitsucom-jitsu, langfuse-fips, gemini-cli...

CVE-2023-49788

Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated Collabora Online server, the Built-in CODE Server richdocumentscode is run without chroot sandboxing. Vulnerable versions of the richdocumentscode app can be susceptible to attac...

CVE-2025-66208

Collabora Online - Built-in CODE Server richdocumentscode provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE OS Command Injection in richdocumentscode proxy. Users of Nextclou...

CVE-2025-66208 Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy

Collabora Online - Built-in CODE Server richdocumentscode provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE OS Command Injection in richdocumentscode proxy. Users of Nextclou...

CVE-2025-66208 Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy

Collabora Online - Built-in CODE Server richdocumentscode provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE OS Command Injection in richdocumentscode proxy. Users of Nextclou...