CVE-2026-102278 vulnerabilities

Vulnerabilities for packages: langfuse-fips, opentelemetry-auto-instrumentations-node, commitizen, langfuse, rancher-api-ui, lambda-nodejs, authentik-fips, actions-runner, foxx-cli, authentik, opensearch-dashboards-fips, nextcloud-server, tileserver-gl-fips, pelias-api, arangodb, lerna, npm,...

CVE-2026-102277 vulnerabilities

Vulnerabilities for packages: langfuse-fips, opentelemetry-auto-instrumentations-node, commitizen, langfuse, rancher-api-ui, lambda-nodejs, authentik-fips, actions-runner, foxx-cli, authentik, opensearch-dashboards-fips, nextcloud-server, tileserver-gl-fips, pelias-api, arangodb, lerna, npm,...

GHSA-QHR7-859C-M2P7 vulnerabilities

Vulnerabilities for packages: langfuse-fips, opentelemetry-auto-instrumentations-node, commitizen, langfuse, rancher-api-ui, lambda-nodejs, authentik-fips, actions-runner, foxx-cli, authentik, opensearch-dashboards-fips, nextcloud-server, tileserver-gl-fips, pelias-api, arangodb, lerna, npm,...

GHSA-Q2HR-2G5M-VWHR vulnerabilities

Vulnerabilities for packages: langfuse-fips, opentelemetry-auto-instrumentations-node, commitizen, langfuse, rancher-api-ui, lambda-nodejs, authentik-fips, actions-runner, foxx-cli, authentik, opensearch-dashboards-fips, nextcloud-server, tileserver-gl-fips, pelias-api, arangodb, lerna, npm,...

GHSA-H3MG-XC3C-68PW vulnerabilities

Vulnerabilities for packages: unleash, actions-runner, langfuse-fips, librechat, lerna, npm, kibana, sqlpad, unleash-proxy, code-server, homepage, langfuse, opensearch-dashboards, opensearch-dashboards-fips, tileserver-gl-fips...

CVE-2026-101911 vulnerabilities

Vulnerabilities for packages: unleash, actions-runner, langfuse-fips, librechat, lerna, npm, kibana, sqlpad, unleash-proxy, code-server, homepage, langfuse, opensearch-dashboards, opensearch-dashboards-fips, tileserver-gl-fips...

GHSA-J6R3-76F7-8JCV vulnerabilities

Vulnerabilities for packages: unleash, actions-runner, langfuse-fips, librechat, lerna, npm, kibana, sqlpad, unleash-proxy, code-server, homepage, langfuse, opensearch-dashboards, opensearch-dashboards-fips, tileserver-gl-fips...

CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS

CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It was found that the Opensearch plugin called "reports" was vulnerable to HTML-injection in version 2.18.0. The report functionality allowed users to store HTML in the header and footer while creating a new report definition. Below is a quick...

CVE-2026-56762 vulnerabilities

Vulnerabilities for packages: gemini-cli, langfuse-fips, librechat, kibana, opensearch-dashboards, langfuse, opensearch-dashboards-fips...

GHSA-55CM-P4WW-685G vulnerabilities

Vulnerabilities for packages: gemini-cli, langfuse-fips, librechat, kibana, opensearch-dashboards, langfuse, opensearch-dashboards-fips...

CVE-2026-13505 vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2026-8798 vulnerabilities

Vulnerabilities for packages: opensearch...

GHSA-98J2-6V39-78W8 vulnerabilities

Vulnerabilities for packages: opensearch...

GHSA-V6W3-QRH8-QCCC vulnerabilities

Vulnerabilities for packages: opensearch...

CLEANSTART-2026-AG97190 Security fix for CVE-2026-33891 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, jitsucom-jitsu 2.11.0-r3, opensearch-dashboards-fips 2.19.5-r0

CVE-2026-33891 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WD42763 Security fix for CVE-2026-2950 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, jitsucom-jitsu 2.11.0-r3, mongosh 2.5.10-r4, mongosh 2.6.0-r3, mongosh 2.7.0-r1, mongosh 2.8.2-r1, mongosh 2.8.2-r2, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r0, renovate 43.123.6-r0, sqlpad 7.5.7-r1

CVE-2026-2950 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PE45361 Security fix for ghsa-ppp5-5v6c-4jwp applied in: jitsucom-jitsu 2.11.0-r3, kibana 9.3.2-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

ghsa-ppp5-5v6c-4jwp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AN94003 Security fix for CVE-2026-4923 applied in: mongosh 2.5.10-r4, mongosh 2.6.0-r3, mongosh 2.7.0-r1, mongosh 2.8.2-r0, opensearch-dashboards-fips 2.19.5-r0, thingsboard 4.3.0.1-r1

CVE-2026-4923 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UA73241 Security fix for CVE-2026-33916 applied in: mongosh 2.5.10-r4, mongosh 2.6.0-r3, mongosh 2.7.0-r1, mongosh 2.8.2-r0, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r2

CVE-2026-33916 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SQ74175 Security fix for CVE-2026-4926 applied in: mongosh 2.5.10-r4, mongosh 2.6.0-r3, mongosh 2.7.0-r1, mongosh 2.8.2-r0, opensearch-dashboards-fips 2.19.5-r0, thingsboard 4.3.0.1-r1

CVE-2026-4926 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...