CVE-2025-53632

CVE-2025-53632 This repository contains an exploit of CVE-2025-53632 affecting Chall-Manager !WARNING The way Chall-Manager deals with scenarios, it is still completly exploitable without the zip slip: simply tamper the pulumi binary from the scenario such that the next execution runs your...

CVE-2026-101916 vulnerabilities

Vulnerabilities for packages: pulumi, langfuse...

GHSA-F596-WHHP-79R4 vulnerabilities

Vulnerabilities for packages: pulumi, langfuse...

GHSA-M9GG-HP2V-232J vulnerabilities

Vulnerabilities for packages: pulumi, langfuse...

CVE-2026-101915 vulnerabilities

Vulnerabilities for packages: pulumi, langfuse...

CVE-2026-101913 vulnerabilities

Vulnerabilities for packages: langfuse, unleash-proxy, npm, graalvm, renovate, pulumi, sqlpad, opensearch-dashboards, lerna, unleash-fips, wazuh-dashboard-fips, actions-runner, commercial-gitlab-rails-ee-fips, code-server, wazuh-dashboard, kibana, prism, homepage, commercial-gitlab-rails-ee,...

GHSA-RPW4-54J3-4H4Q vulnerabilities

Vulnerabilities for packages: langfuse, unleash-proxy, npm, graalvm, renovate, pulumi, sqlpad, opensearch-dashboards, lerna, unleash-fips, wazuh-dashboard-fips, actions-runner, commercial-gitlab-rails-ee-fips, code-server, wazuh-dashboard, kibana, prism, homepage, commercial-gitlab-rails-ee,...

CVE-2026-101910 vulnerabilities

Vulnerabilities for packages: langfuse, unleash-proxy, npm, graalvm, renovate, pulumi, sqlpad, opensearch-dashboards, lerna, unleash-fips, wazuh-dashboard-fips, actions-runner, commercial-gitlab-rails-ee-fips, code-server, wazuh-dashboard, kibana, prism, homepage, commercial-gitlab-rails-ee,...

GHSA-2VR4-CQ9G-PVRC vulnerabilities

Vulnerabilities for packages: langfuse, unleash-proxy, npm, graalvm, renovate, pulumi, sqlpad, opensearch-dashboards, lerna, unleash-fips, wazuh-dashboard-fips, actions-runner, commercial-gitlab-rails-ee-fips, code-server, wazuh-dashboard, kibana, prism, homepage, commercial-gitlab-rails-ee,...

CVE-2026-101913 vulnerabilities

Vulnerabilities for packages: code-server, sqlpad, pulumi, lerna, npm, renovate, prism, opensearch-dashboards...

CVE-2026-101910 vulnerabilities

Vulnerabilities for packages: code-server, sqlpad, pulumi, lerna, npm, renovate, prism, opensearch-dashboards...

GHSA-2VR4-CQ9G-PVRC vulnerabilities

Vulnerabilities for packages: code-server, sqlpad, pulumi, lerna, npm, renovate, prism, opensearch-dashboards...

GHSA-RPW4-54J3-4H4Q vulnerabilities

Vulnerabilities for packages: code-server, sqlpad, pulumi, lerna, npm, renovate, prism, opensearch-dashboards...

CVE-2026-85024 vulnerabilities

Vulnerabilities for packages: pulumi, prism, homepage, vitess, commercial-gitlab-rails-ee, npm, actions-runner, commercial-gitlab-rails-ee-fips, code-server, renovate, kibana, lerna...

GHSA-3WWX-PV8P-Q78V vulnerabilities

Vulnerabilities for packages: pulumi, prism, homepage, vitess, commercial-gitlab-rails-ee, npm, actions-runner, commercial-gitlab-rails-ee-fips, code-server, renovate, kibana, lerna...

GHSA-3WWX-PV8P-Q78V vulnerabilities

Vulnerabilities for packages: vitess, code-server, pulumi, lerna, renovate, prism...

CVE-2026-85024 vulnerabilities

Vulnerabilities for packages: vitess, code-server, pulumi, lerna, renovate, prism...

CLEANSTART-2026-WX98104 Security fix for CVE-2026-42338 applied in: opensearch-dashboards-fips 2.19.5-r0, proxy-agent 6.5.0-r0, pulumi 3.248.0-r0, renovate 43.123.8-r3, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1, sqlpad 7.5.7-r3

CVE-2026-42338 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IM94459 Security fix for CVE-2026-9358 applied in: npm 11.14.0-r3, pulumi 3.248.0-r0

CVE-2026-9358 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GE92046 Security fix for CVE-2026-45149 applied in: npm 11.14.0-r0, pulumi 3.248.0-r0, renovate 44.31.0-r1, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-45149 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...