GHSA-2GQQ-GQF2-X968 vulnerabilities

Vulnerabilities for packages: node-gyp, prism, code-server...

GHSA-8436-99HF-9MMV vulnerabilities

Vulnerabilities for packages: node-gyp, prism, code-server...

GHSA-2JFJ-6HJV-FM6J vulnerabilities

Vulnerabilities for packages: node-gyp, prism, code-server...

GHSA-RX4F-C7P8-82VQ vulnerabilities

Vulnerabilities for packages: node-gyp, prism, code-server...

GHSA-3XPG-4RPP-HHHM vulnerabilities

Vulnerabilities for packages: node-gyp, prism, code-server...

GHSA-W293-VG96-WGC3 vulnerabilities

Vulnerabilities for packages: node-gyp, prism, code-server...

CVE-2026-85014 vulnerabilities

Vulnerabilities for packages: node-gyp, prism, code-server...

CVE-2026-84890 vulnerabilities

Vulnerabilities for packages: node-gyp, prism, code-server...

CVE-2026-84947 vulnerabilities

Vulnerabilities for packages: node-gyp, prism, code-server...

CVE-2026-85008 vulnerabilities

Vulnerabilities for packages: node-gyp, prism, code-server...

CVE-2026-84933 vulnerabilities

Vulnerabilities for packages: node-gyp, prism, code-server...

CVE-2026-84961 vulnerabilities

Vulnerabilities for packages: node-gyp, prism, code-server...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, argo-workflows, wazuh-dashboard-fips, langfuse, langfuse-fips, tileserver-gl, opensearch-dashboards-fips, unleash-proxy, arangodb, unleash-fips, json-server, prism, dotstatsuite-supercore, sqlpad, gitlab-rails-ce-fips, code-server, tileserver-gl-fips...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, argo-workflows, wazuh-dashboard-fips, langfuse, langfuse-fips, tileserver-gl, opensearch-dashboards-fips, unleash-proxy, arangodb, unleash-fips, json-server, prism, dotstatsuite-supercore, tensorflow-gpu-jupyter, sqlpad, gitlab-rails-ce-fips,...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: prism, code-server, json-server, opensearch-dashboards, langfuse, sqlpad, argo-workflows, tileserver-gl, kubeflow-centraldashboard, renovate...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: prism, code-server, json-server, opensearch-dashboards, langfuse, sqlpad, argo-workflows, tileserver-gl, kubeflow-centraldashboard, renovate...

CVE-2026-82417 vulnerabilities

Vulnerabilities for packages: prism, code-server, json-server, opensearch-dashboards, langfuse, sqlpad, argo-workflows, tileserver-gl, kubeflow-centraldashboard, renovate...

CVE-2026-82562 vulnerabilities

Vulnerabilities for packages: prism, code-server, json-server, opensearch-dashboards, langfuse, sqlpad, argo-workflows, tileserver-gl, kubeflow-centraldashboard, renovate...

CVE-2026-73566 vulnerabilities

Vulnerabilities for packages: prism, code-server, lerna, npm, pulumi, saf, opensearch-dashboards, sqlpad, node-gyp, kubeflow-centraldashboard, renovate...

JLSEC-2026-1274 code-server's session cookie can be extracted by having user visit specially crafted proxy URL

Summary A maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Details Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL https:///proxy/[email protected]/path would be...