GHSA-2V8P-3F2J-5MP7 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

CVE-2026-50159 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

GHSA-C4C3-PG64-4M4V vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

GHSA-RHH3-JPG6-66XH vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

GHSA-6X64-9X62-F2GX vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

GHSA-3RRR-JR9J-H3Q3 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

CVE-2026-71438 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

CVE-2026-71437 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

GHSA-W737-WX49-QJ23 vulnerabilities

Vulnerabilities for packages: dependency-track, zipkin, apicurio-registry, infinispan...

GHSA-G3PR-3P32-FP23 vulnerabilities

Vulnerabilities for packages: dependency-track, zipkin, apicurio-registry, infinispan...

EUVD-2025-27054

Frappe is a full-stack web application framework. Versions 14.96.9 and below, and 15.0.0 through 15.71.0 have an insecure endpoint parameter that is vulnerable to error-based SQL Injection through lack of validation. Sensitive information such as versioning can be retrieved. This issue is fixed i...

EUVD-2026-44768

jsii-diff: Command Injection via npm: package argument...

MAL-2026-13678 Malicious code in svelte-map-visual (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6454f69cbd9ee5dce9ba329c1c395a782bc495299a6eeec26455451416f7f37 No malicious behavior was identified in this package version. No lifecycle scripts fetching or executing remote content, no credential or...

Malicious code in svelte-map-visual (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6454f69cbd9ee5dce9ba329c1c395a782bc495299a6eeec26455451416f7f37 No malicious behavior was identified in this package version. No lifecycle scripts fetching or executing remote content, no credential or...

Malicious code in svelte-cache-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1453b15dc9dc17e87c7dd53ab81d2e1c5988a6a3436d37e90500acd83dacdd22 No a static rule matches and no traced install-time or import-time behavior of concern were identified in this package version. No credential access,...

MAL-2026-13676 Malicious code in svelte-cache-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1453b15dc9dc17e87c7dd53ab81d2e1c5988a6a3436d37e90500acd83dacdd22 No a static rule matches and no traced install-time or import-time behavior of concern were identified in this package version. No credential access,...

Malicious code in @lambda-platform/lambda-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405a4d9bac602cd3fca6afbcee8dde788580934920352178864343fab46fa64b No static or traced-code signals of exfiltration, install-time remote code execution, silent-relay, credential distribution, backdoor, or...

MAL-2026-13668 Malicious code in @lambda-platform/lambda-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405a4d9bac602cd3fca6afbcee8dde788580934920352178864343fab46fa64b No static or traced-code signals of exfiltration, install-time remote code execution, silent-relay, credential distribution, backdoor, or...

GHSA-VWF4-M7J8-WCJF vulnerabilities

Vulnerabilities for packages: metabase...

MAL-2026-13559 Malicious code in dolyame-ui-collapseblock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef9992e81f3de4cb9bd4391466d7850e953c19a0772ebbe5992953044466377c On require, shim.js fetches an OS/architecture-specific native binary from hardcoded Cloudflare Workers hosts oob-worker.cf100-416.workers.dev,...