CVE-2026-25896 vulnerabilities

Vulnerabilities for packages: renovate, tileserver-gl, langfuse, prism, saf, dbgate, kibana, langfuse-fips, tileserver-gl-fips, dbgate-fips...

CVE-2026-2391 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, tileserver-gl, thingsboard, saf, argo-workflows, opensearch-dashboards, sqlpad, langfuse, code-server, json-server, py3-jupyterlab, kubeflow-katib...

GHSA-W7FW-MJWX-W883 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, tileserver-gl, thingsboard, saf, argo-workflows, opensearch-dashboards, sqlpad, langfuse, code-server, json-server, py3-jupyterlab, kubeflow-katib...

GHSA-34X7-HFP2-RC4V vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, pnpm-stage0, renovate, tileserver-gl, prism, node-gyp, saf, vitess, sqlpad, lerna, pulumi, opensearch-dashboards, code-server, py3-jupyterlab, npm, kubeflow-katib...

CVE-2026-24842 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, pnpm-stage0, renovate, tileserver-gl, prism, node-gyp, saf, vitess, sqlpad, lerna, pulumi, opensearch-dashboards, code-server, py3-jupyterlab, npm, kubeflow-katib...

CVE-2026-24842 vulnerabilities

Vulnerabilities for packages: tileserver-gl, tensorflow-cpu-jupyter, wazuh-dashboard-fips, wazuh-dashboard, opensearch-dashboards, pulumi, kubeflow-katib, code-server, npm, saf, vitess, redisinsight, node-gyp, lerna, py3-jupyterlab, actions-runner, kubeflow-pipelines, pnpm-stage0, graalvm, kibana...

GHSA-34X7-HFP2-RC4V vulnerabilities

Vulnerabilities for packages: tileserver-gl, tensorflow-cpu-jupyter, wazuh-dashboard-fips, wazuh-dashboard, opensearch-dashboards, pulumi, kubeflow-katib, code-server, npm, saf, vitess, redisinsight, node-gyp, lerna, py3-jupyterlab, actions-runner, kubeflow-pipelines, pnpm-stage0, graalvm, kibana...

CVE-2024-51999 vulnerabilities

Vulnerabilities for packages: tileserver-gl, saf, argo-workflows, sqlpad, json-server, thingsboard...

GHSA-PJ86-CFQH-VQX6 vulnerabilities

Vulnerabilities for packages: tileserver-gl, saf, argo-workflows, sqlpad, json-server, thingsboard...

CVE-2024-51999 vulnerabilities

Vulnerabilities for packages: thingsboard, argo-workflows, tileserver-gl, saf, redisinsight, json-server, sqlpad, librechat...

GHSA-PJ86-CFQH-VQX6 vulnerabilities

Vulnerabilities for packages: thingsboard, argo-workflows, tileserver-gl, saf, redisinsight, json-server, sqlpad, librechat...

VulnCheck KEV: CVE-2025-44137

MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creating the path to a file allows the insertion of "../" and thus read any file on the web...

VulnCheck KEV: CVE-2025-44136

MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting XSS. The GET parameter "layer" is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to execute arbitrary HTML or JavaScript code on a victim's browser...

EUVD-2025-23023

Malicious code in bioql PyPI...

EUVD-2024-33155

Malicious code in bioql PyPI...

EUVD-2024-35388

Malicious code in bioql PyPI...

EUVD-2025-23022

Malicious code in bioql PyPI...

CVE-2025-44136

MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting XSS. The GET parameter "layer" is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to execute arbitrary HTML or JavaScript code on a victim's browser...

CVE-2025-44136

MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting XSS. The GET parameter "layer" is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to execute arbitrary HTML or JavaScript code on a victim's browser...

PT-2025-31223 · Maptiler · Maptiler Tileserver-Php

Name of the Vulnerable Software and Affected Versions: MapTiler Tileserver-php version 2.0 Description: MapTiler Tileserver-php version 2.0 is susceptible to a Cross Site Scripting XSS issue. The layer GET parameter is reflected in an error message without proper HTML encoding. This allows an...