GHSA-2GQQ-GQF2-X968 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

GHSA-8436-99HF-9MMV vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

GHSA-2JFJ-6HJV-FM6J vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

GHSA-W293-VG96-WGC3 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

GHSA-3XPG-4RPP-HHHM vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

GHSA-RX4F-C7P8-82VQ vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

CVE-2026-85014 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

CVE-2026-84890 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

CVE-2026-84947 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

CVE-2026-84933 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

CVE-2026-84961 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

CVE-2026-85008 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, prism...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: json-server, dotstatsuite-supercore, langfuse, langfuse-fips, renovate, pelias-api, wazuh-dashboard-fips, unleash, code-server, azurite, gitlab-rails-ce-fips, argo-workflows, redisinsight, unleash-proxy, tileserver-gl-fips, gitlab-rails-ce, kubescape-grype-offline-db...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: json-server, dotstatsuite-supercore, langfuse, langfuse-fips, renovate, pelias-api, wazuh-dashboard-fips, unleash, tensorflow-gpu-jupyter, code-server, azurite, gitlab-rails-ce-fips, argo-workflows, redisinsight, unleash-proxy, tileserver-gl-fips, gitlab-rails-ce,...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: tileserver-gl, json-server, renovate, prism, kubeflow-centraldashboard, opensearch-dashboards, argo-workflows, code-server, sqlpad, langfuse...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: tileserver-gl, json-server, renovate, prism, kubeflow-centraldashboard, opensearch-dashboards, argo-workflows, code-server, sqlpad, langfuse...

CVE-2026-82417 vulnerabilities

Vulnerabilities for packages: tileserver-gl, json-server, renovate, prism, kubeflow-centraldashboard, opensearch-dashboards, argo-workflows, code-server, sqlpad, langfuse...

CVE-2026-82562 vulnerabilities

Vulnerabilities for packages: tileserver-gl, json-server, renovate, prism, kubeflow-centraldashboard, opensearch-dashboards, argo-workflows, code-server, sqlpad, langfuse...

CVE-2026-73566 vulnerabilities

Vulnerabilities for packages: renovate, lerna, node-gyp, prism, npm, kubeflow-centraldashboard, saf, opensearch-dashboards, code-server, sqlpad, pulumi...

JLSEC-2026-1274 code-server's session cookie can be extracted by having user visit specially crafted proxy URL

Summary A maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Details Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL https:///proxy/[email protected]/path would be...