1239 matches found
CVE-2026-44488 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, wazuh-dashboard-fips, nextcloud-server, gitlab-rails-ce, opensearch-dashboards, kubeflow-katib, awx, wazuh-dashboard, gitlab-rails-ce-fips...
CVE-2026-43826
The OpenSearch logging provider, when configured with a host URL that embeds credentials for example https://user:[email protected]:9200, wrote the full host URL — including the embedded credentials — into task logs. Any user with task-log read permission could harvest the backend...
GHSA-298W-VVM4-WW55 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-298W-VVM4-WW55 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, wazuh-dashboard-fips, wazuh-dashboard...
Malicious Package
Overview opensearch-config-utility is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between those...
Malicious Package
Overview opensearch-security-scanner is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between tho...
Malicious Package
Overview opensearch-setup-tool is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between those...
Typosquatted npm packages used to steal cloud and CI/CD secrets
In this article 1. Attack chain overview 1. The lure: typosquats and spoofed metadata 2. Execution: npm lifecycle hook abuse 3. Gen-1 stager: HTTP C2 beacon and payload drop 4. Gen-2 stager: abusing the legitimate Bun runtime as a loader 5. Credential theft 6. Impact and blast radius 2. Mitigatio...
ROS-20260529-73-0001
The vulnerability in opensearch is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260529-73-0023
The vulnerability in opensearch is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260529-73-0022
The vulnerability in opensearch is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260529-73-0002
The vulnerability in opensearch relates to the use of a name with an incorrect link. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
ROS-20260529-73-0024
The vulnerability in opensearch is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260529-73-0021
The vulnerability in opensearch relates to the use of a name with an incorrect link. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
CVE-2026-44457 vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-HM8Q-7F3Q-5F36 vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-P77W-8QQV-26RM vulnerabilities
Vulnerabilities for packages: langfuse...
CVE-2026-44458 vulnerabilities
Vulnerabilities for packages: langfuse...