CVE-2026-102278 vulnerabilities

Vulnerabilities for packages: actions-runner, commercial-gitlab-rails-ee-fips, unleash-fips, lerna, gitlab-rails-ce, redisinsight, authentik-fips, commitizen, renovate, tensorflow-gpu-jupyter, graalvm, rancher-api-ui, langfuse-fips, opensearch-dashboards, prism, unleash-proxy, gitlab-rails-ce-fip...

GHSA-Q2HR-2G5M-VWHR vulnerabilities

Vulnerabilities for packages: actions-runner, commercial-gitlab-rails-ee-fips, unleash-fips, lerna, gitlab-rails-ce, redisinsight, authentik-fips, commitizen, renovate, tensorflow-gpu-jupyter, graalvm, rancher-api-ui, langfuse-fips, opensearch-dashboards, prism, unleash-proxy, gitlab-rails-ce-fip...

GHSA-QHR7-859C-M2P7 vulnerabilities

Vulnerabilities for packages: actions-runner, commercial-gitlab-rails-ee-fips, unleash-fips, lerna, gitlab-rails-ce, redisinsight, authentik-fips, commitizen, renovate, tensorflow-gpu-jupyter, graalvm, rancher-api-ui, langfuse-fips, opensearch-dashboards, prism, unleash-proxy, gitlab-rails-ce-fip...

CVE-2026-102277 vulnerabilities

Vulnerabilities for packages: actions-runner, commercial-gitlab-rails-ee-fips, unleash-fips, lerna, gitlab-rails-ce, redisinsight, authentik-fips, commitizen, renovate, tensorflow-gpu-jupyter, graalvm, rancher-api-ui, langfuse-fips, opensearch-dashboards, prism, unleash-proxy, gitlab-rails-ce-fip...

Malicious code in auto-instrumentations-node (npm)

--- Credit: OpenSSF source...

CVE-2026-48069 vulnerabilities

Vulnerabilities for packages: langfuse-fips, pulumi, cadence-web, jitsucom-jitsu, langfuse, gemini-cli, opentelemetry-auto-instrumentations-node, kibana...

CVE-2026-48068 vulnerabilities

Vulnerabilities for packages: langfuse-fips, pulumi, cadence-web, jitsucom-jitsu, langfuse, gemini-cli, opentelemetry-auto-instrumentations-node, kibana...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +1517 more potentially affected by CVE-2026-44902 via @opentelemetry/auto-instrumentations-node (>=0.16.0, <=0.74.0)

@opentelemetry/auto-instrumentations-node NPM version =0.16.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.8.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.2.0, =0.2.0, =0.0.1, =0.3.4-0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =5.0.1-staging.f17326334 and more Source cves:...

CVE-2026-44288 vulnerabilities

Vulnerabilities for packages: nemo, vitess, librechat, pulumi, cadence-web, kubeflow-centraldashboard, gemini-cli, renovate, opentelemetry-auto-instrumentations-node, homepage, kibana...

CVE-2026-44292 vulnerabilities

Vulnerabilities for packages: nemo, vitess, librechat, pulumi, cadence-web, kubeflow-centraldashboard, gemini-cli, renovate, opentelemetry-auto-instrumentations-node, homepage, kibana...

GHSA-FX83-V9X8-X52W vulnerabilities

Vulnerabilities for packages: nemo, vitess, librechat, pulumi, cadence-web, kubeflow-centraldashboard, gemini-cli, renovate, opentelemetry-auto-instrumentations-node, homepage, kibana...

GHSA-JVWF-75H9-CWGG vulnerabilities

Vulnerabilities for packages: nemo, vitess, librechat, pulumi, cadence-web, kubeflow-centraldashboard, gemini-cli, renovate, opentelemetry-auto-instrumentations-node, homepage, kibana...

GHSA-2PR8-PHX7-X9H3 vulnerabilities

Vulnerabilities for packages: nemo, vitess, librechat, pulumi, cadence-web, kubeflow-centraldashboard, gemini-cli, renovate, opentelemetry-auto-instrumentations-node, homepage, kibana...

GHSA-66FF-XGX4-VCHM vulnerabilities

Vulnerabilities for packages: nemo, vitess, librechat, pulumi, cadence-web, kubeflow-centraldashboard, gemini-cli, renovate, opentelemetry-auto-instrumentations-node, homepage, kibana...

GHSA-685M-2W69-288Q vulnerabilities

Vulnerabilities for packages: nemo, vitess, librechat, pulumi, cadence-web, kubeflow-centraldashboard, gemini-cli, renovate, opentelemetry-auto-instrumentations-node, homepage, kibana...

GHSA-Q6X5-8V7M-XCRF vulnerabilities

Vulnerabilities for packages: nemo, vitess, librechat, pulumi, cadence-web, kubeflow-centraldashboard, gemini-cli, renovate, opentelemetry-auto-instrumentations-node, homepage, kibana...

CVE-2026-44290 vulnerabilities

Vulnerabilities for packages: nemo, vitess, librechat, pulumi, cadence-web, kubeflow-centraldashboard, gemini-cli, renovate, opentelemetry-auto-instrumentations-node, homepage, kibana...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +929 more potentially affected by CVE-2026-44902 via @opentelemetry/auto-instrumentations-node (>=0.55.0, <=0.74.0)

@opentelemetry/auto-instrumentations-node NPM version =0.55.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.8.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.3.4-0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.1, =0.4.0, =0.4.0, =5.0.1-staging.f672fe79b213 and more Source cves:...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +929 more potentially affected by CVE-2026-44902 via @opentelemetry/auto-instrumentations-node (>=0.55.0, <=0.74.0)

@opentelemetry/auto-instrumentations-node NPM version =0.55.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.8.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.3.4-0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.1, =0.4.0, =0.4.0, =5.0.1-staging.f672fe79b213 and more Source cves:...

CVE-2026-41242 vulnerabilities

Vulnerabilities for packages: nemo, vitess, langfuse-fips, librechat, pulumi, langfuse, jitsucom-jitsu, kubeflow-centraldashboard, gemini-cli, renovate, opentelemetry-auto-instrumentations-node, kibana...