PT-2026-101599

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102052

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100654

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100322

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101189

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102169

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-73579: Incorrect Authorization

Incorrect Authorization vulnerability in Apache Syncope. Any search requests are transformed into SQL, Neo4J or Elasticsearch / Opensearch queries, depending on the actual deployment configuration. An important component of such transformation is the Realms filter, which ensures that the search...

GHSA-6W3J-5FW6-R9VR vulnerabilities

Vulnerabilities for packages: thingsboard, opensearch-dashboards...

CVE-2026-84367 vulnerabilities

Vulnerabilities for packages: thingsboard, opensearch-dashboards...

CVE-2026-84368 vulnerabilities

Vulnerabilities for packages: thingsboard, opensearch-dashboards...

GHSA-GG4H-3HG2-GRPC vulnerabilities

Vulnerabilities for packages: thingsboard, opensearch-dashboards...

cognee-community-hybrid-adapter-duckdb (>=0.1.2, <=0.1.3), cognee-community-hybrid-adapter-falkor (0.2.1) +11 more potentially affected by CVE-2026-58473 via cognee (0.5.2)

cognee PYPI version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-hybrid-adapter-duckdb =0.1.2, =0.1.1, =0.1.1, =0.1.1, =0.1.2 - cognee-community-tasks-scrapegraph 0.1.0 -...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, jitsucom-jitsu, langfuse, kubeflow-centraldashboard, lerna, prism, nextcloud-server...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, jitsucom-jitsu, langfuse, kubeflow-centraldashboard, lerna, prism, nextcloud-server...

CVE-2026-84942

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942

This stored cross-site scripting (XSS) vulnerability affects OpenSearch Dashboards . The root cause is a flaw in the checkForFunctionProperty validation routine within the Vega expression function, which failed to recurse into arrays of objects, allowing a function property nested inside an array...

EUVD-2026-74074

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...