GHSA-8M3C-C648-2XJJ vulnerabilities

Vulnerabilities for packages: langfuse, unleash-fips...

GHSA-CC9R-2J5M-2M83 vulnerabilities

Vulnerabilities for packages: langfuse, unleash-fips...

GHSA-WMMP-3585-3RMP vulnerabilities

Vulnerabilities for packages: langfuse, unleash-fips...

CVE-2026-84371 vulnerabilities

Vulnerabilities for packages: unleash, unleash-fips, tensorflow-gpu-jupyter...

GHSA-G8QQ-57P8-GGW5 vulnerabilities

Vulnerabilities for packages: unleash, unleash-fips, tensorflow-gpu-jupyter...

GHSA-JQFF-G426-HQXP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, wazuh-dashboard, kibana, langfuse-fips, yaml-language-server, tileserver-gl-fips, unleash, tensorflow-gpu-jupyter, keep-fips, keep, tileserver-gl, unleash-fips, opensearch-dashboards-fips, wazuh-dashboard-fips, prism, opensearch-dashboards,...

GHSA-FPH4-WMHF-6FWF vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, wazuh-dashboard, kibana, langfuse-fips, yaml-language-server, tileserver-gl-fips, unleash, tensorflow-gpu-jupyter, keep-fips, keep, tileserver-gl, unleash-fips, opensearch-dashboards-fips, wazuh-dashboard-fips, prism, opensearch-dashboards,...

GHSA-H3HJ-CMCX-XC66 vulnerabilities

Vulnerabilities for packages: librechat, langfuse-fips, jitsucom-jitsu, unleash-fips, unleash, kibana, langfuse...

CVE-2026-82659 vulnerabilities

Vulnerabilities for packages: librechat, langfuse-fips, jitsucom-jitsu, unleash-fips, unleash, kibana, langfuse...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: azurite, wazuh-dashboard, kibana, langfuse-fips, renovate, tileserver-gl-fips, arangodb, unleash, redisinsight, code-server, pelias-api, dotstatsuite-supercore, sqlpad, tileserver-gl, unleash-fips, opensearch-dashboards-fips, wazuh-dashboard-fips, prism,...

CVE-2026-63004

creationtimestamp| type| source ---|---|--- 2026-08-21 20:35:02+00:00| published-proof-of-concept| https://github.com/Unleash/unleash/security/advisories/GHSA-5vf6-jrqr-78fj 2026-08-22 11:31:40+00:00| seen| https://gist.github.com/alon710/d92488505ce17a941a9b8015b1dda8cf...

CVE-2026-63466

Unleash is an open-source feature management platform. Prior to 8.0.3, FeatureEventFormatterMd.format in src/lib/addons/feature-event-formatter-md.ts assigns Mustache.escape to an identity function before rendering action and path templates. Because Mustache.escape is process-wide, the assignment...

CVE-2026-63462

Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the shared OpenAPI validation error path in src/lib/error/bad-data-error.ts passes a raw request value from lodash.get to JSON.stringify in genericErrorMessage and fromOpenApiValidationErrors without guarding...

CVE-2026-63004

Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the addon and integration subsystem passes the operator-controlled parameters.url value from src/lib/addons/webhook.ts and the Slack, Microsoft Teams, Datadog, and New Relic integrations to Addon.fetchRetry i...

Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username

Vulnerability Details File: src/lib/addons/feature-event-formatter-md.ts Line: 355 in v8.0.1; format method Root Cause FeatureEventFormatterMd.format does: ts Mustache.escape = text = text; const text = Mustache.renderaction, context; mustache pinned ^4.2.0, confirmed installed 4.2.0 keeps escape...

GHSA-W4MQ-XH27-6XPX Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username

Vulnerability Details File: src/lib/addons/feature-event-formatter-md.ts Line: 355 in v8.0.1; format method Root Cause FeatureEventFormatterMd.format does: ts Mustache.escape = text = text; const text = Mustache.renderaction, context; mustache pinned ^4.2.0, confirmed installed 4.2.0 keeps escape...

NPM: Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username

NPM: Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username vulnerability discovered by ? in WordPress Npm unleash-server versions 8.0.3...

GHSA-5VF6-JRQR-78FJ Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers

Summary Unleash's addon/integration subsystem lets an operator configure a webhook and the Slack, Microsoft Teams, Datadog, and New Relic integrations with a target url parameter. Whenever a subscribed feature-flag event fires, the Unleash server itself issues an HTTP request to that configured...

NPM: Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers

NPM: Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers vulnerability discovered by ? in WordPress Npm unleash-server versions 7.5.2...

NPM: Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter

NPM: Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter vulnerability discovered by ? in WordPress Npm unleash-server versions 7.5.2...