PT-2026-88317

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942: Improper Neutralization of Input During Web Page Generation

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

GHSA-JQFF-G426-HQXP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, commercial-gitlab-rails-ee, unleash-fips, yaml-language-server, wazuh-dashboard-fips, keep-fips, langfuse, langfuse-fips, argo-workflows, commercial-gitlab-rails-ee-fips, wazuh-dashboard, tileserver-gl, jupyter-base-notebook,...

GHSA-5JGF-P345-68V8 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, unleash-fips, yaml-language-server, wazuh-dashboard-fips, keep-fips, langfuse, langfuse-fips, wazuh-dashboard, tileserver-gl, keep, opensearch-dashboards, nextcloud-server, unleash, prism, unleash-proxy, kibana, tileserver-gl-fips,...

GHSA-FPH4-WMHF-6FWF vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, unleash-fips, yaml-language-server, wazuh-dashboard-fips, keep-fips, langfuse, langfuse-fips, argo-workflows, wazuh-dashboard, tileserver-gl, jupyter-base-notebook, tensorflow-gpu-jupyter, keep, opensearch-dashboards, nextcloud-server,...

GHSA-F65P-4M7J-42XC vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, commercial-gitlab-rails-ee, unleash-fips, yaml-language-server, wazuh-dashboard-fips, keep-fips, langfuse, langfuse-fips, argo-workflows, commercial-gitlab-rails-ee-fips, wazuh-dashboard, tileserver-gl, jupyter-base-notebook,...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: pelias-api, gitlab-rails-ce-fips, azurite, arangodb, commercial-gitlab-rails-ee, json-server, unleash-fips, kubescape-grype-offline-db, renovate, wazuh-dashboard-fips, sqlpad, langfuse, kubeflow-centraldashboard, langfuse-fips, argo-workflows,...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: pelias-api, gitlab-rails-ce-fips, azurite, arangodb, commercial-gitlab-rails-ee, json-server, unleash-fips, kubescape-grype-offline-db, renovate, wazuh-dashboard-fips, sqlpad, langfuse, kubeflow-centraldashboard, langfuse-fips, argo-workflows,...

CVE-2026-75931 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, unleash-fips, yaml-language-server, wazuh-dashboard-fips, keep-fips, langfuse, langfuse-fips, wazuh-dashboard, tileserver-gl, keep, opensearch-dashboards, nextcloud-server, unleash, prism, unleash-proxy, kibana, tileserver-gl-fips,...

CVE-2026-82562 vulnerabilities

Vulnerabilities for packages: pelias-api, gitlab-rails-ce-fips, azurite, arangodb, commercial-gitlab-rails-ee, json-server, unleash-fips, kubescape-grype-offline-db, renovate, wazuh-dashboard-fips, sqlpad, langfuse, kubeflow-centraldashboard, langfuse-fips, argo-workflows,...

CVE-2026-82417 vulnerabilities

Vulnerabilities for packages: pelias-api, gitlab-rails-ce-fips, azurite, arangodb, commercial-gitlab-rails-ee, json-server, unleash-fips, kubescape-grype-offline-db, renovate, wazuh-dashboard-fips, sqlpad, langfuse, kubeflow-centraldashboard, langfuse-fips, argo-workflows,...

CVE-2026-75899 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, unleash-fips, yaml-language-server, wazuh-dashboard-fips, keep-fips, langfuse, langfuse-fips, argo-workflows, wazuh-dashboard, tileserver-gl, jupyter-base-notebook, tensorflow-gpu-jupyter, keep, opensearch-dashboards, nextcloud-server,...

CVE-2026-75975 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, commercial-gitlab-rails-ee, unleash-fips, yaml-language-server, wazuh-dashboard-fips, keep-fips, langfuse, langfuse-fips, argo-workflows, commercial-gitlab-rails-ee-fips, wazuh-dashboard, tileserver-gl, jupyter-base-notebook,...

CVE-2026-76172 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, commercial-gitlab-rails-ee, unleash-fips, yaml-language-server, wazuh-dashboard-fips, keep-fips, langfuse, langfuse-fips, argo-workflows, commercial-gitlab-rails-ee-fips, wazuh-dashboard, tileserver-gl, jupyter-base-notebook,...

CVE-2026-67319 vulnerabilities

Vulnerabilities for packages: semaphore, gitlab-rails-ce-fips, azurite, lerna, arangodb, wazuh-dashboard-fips, langfuse, kubeflow-centraldashboard, langfuse-fips, librechat, wazuh-dashboard, gitlab-rails-ce, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, awx, redisinsight, kibana...

GHSA-9WX3-P993-35VP vulnerabilities

Vulnerabilities for packages: semaphore, gitlab-rails-ce-fips, azurite, lerna, arangodb, wazuh-dashboard-fips, langfuse, kubeflow-centraldashboard, langfuse-fips, librechat, wazuh-dashboard, gitlab-rails-ce, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, awx, redisinsight, kibana...

GHSA-FQ2J-3J99-RX65 vulnerabilities

Vulnerabilities for packages: semaphore, gitlab-rails-ce-fips, azurite, lerna, arangodb, wazuh-dashboard-fips, langfuse, kubeflow-centraldashboard, langfuse-fips, librechat, wazuh-dashboard, gitlab-rails-ce, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, awx, redisinsight, kibana...

GHSA-6HQM-HM2V-3P2P vulnerabilities

Vulnerabilities for packages: semaphore, gitlab-rails-ce-fips, azurite, lerna, wazuh-dashboard-fips, langfuse, kubeflow-centraldashboard, langfuse-fips, librechat, wazuh-dashboard, gitlab-rails-ce, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, awx, redisinsight, kibana,...

GHSA-FQJ3-H9PC-443H vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, awx, gitlab-rails-ce-fips, redisinsight, nextcloud-server, semaphore, kibana, langfuse, lerna, kubeflow-centraldashboard, langfuse-fips, opensearch-dashboards-fips, jitsucom-jitsu, librechat, wazuh-dashboard, wazuh-dashboard-fips, prism,...

CVE-2026-67313 vulnerabilities

Vulnerabilities for packages: semaphore, gitlab-rails-ce-fips, azurite, lerna, arangodb, wazuh-dashboard-fips, langfuse, kubeflow-centraldashboard, langfuse-fips, librechat, wazuh-dashboard, gitlab-rails-ce, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, awx, redisinsight, kibana...