18 matches found
CVE-2026-102278 vulnerabilities
Vulnerabilities for packages: sqlpad, foxx-cli, wazuh-dashboard, wazuh-dashboard-fips, unleash-fips, nextcloud-server, authentik, arangodb, pelias-api, dotstatsuite-supercore, actions-runner, langfuse, verdaccio, redisinsight, opensearch-dashboards, prism, rancher-api-ui, gitlab-rails-ce, lerna,...
GHSA-QHR7-859C-M2P7 vulnerabilities
Vulnerabilities for packages: sqlpad, foxx-cli, wazuh-dashboard, wazuh-dashboard-fips, unleash-fips, nextcloud-server, authentik, arangodb, pelias-api, dotstatsuite-supercore, actions-runner, langfuse, verdaccio, redisinsight, opensearch-dashboards, prism, rancher-api-ui, gitlab-rails-ce, lerna,...
GHSA-Q2HR-2G5M-VWHR vulnerabilities
Vulnerabilities for packages: sqlpad, foxx-cli, wazuh-dashboard, wazuh-dashboard-fips, unleash-fips, nextcloud-server, authentik, arangodb, pelias-api, dotstatsuite-supercore, actions-runner, langfuse, verdaccio, redisinsight, opensearch-dashboards, prism, rancher-api-ui, gitlab-rails-ce, lerna,...
CVE-2026-102277 vulnerabilities
Vulnerabilities for packages: sqlpad, foxx-cli, wazuh-dashboard, wazuh-dashboard-fips, unleash-fips, nextcloud-server, authentik, arangodb, pelias-api, dotstatsuite-supercore, actions-runner, langfuse, verdaccio, redisinsight, opensearch-dashboards, prism, rancher-api-ui, gitlab-rails-ce, lerna,...
Malicious code in auto-instrumentations-node (npm)
--- Credit: OpenSSF source...
0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +1517 more potentially affected by CVE-2026-44902 via @opentelemetry/auto-instrumentations-node (>=0.16.0, <=0.74.0)
@opentelemetry/auto-instrumentations-node NPM version =0.16.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.8.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.2.0, =0.2.0, =0.0.1, =0.3.4-0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =5.0.1-staging.f17326334 and more Source cves:...
CVE-2026-44292 vulnerabilities
Vulnerabilities for packages: librechat, gemini-cli, vitess, homepage, kibana, pulumi, nemo, kubeflow-centraldashboard, cadence-web, opentelemetry-auto-instrumentations-node, renovate...
CVE-2026-44288 vulnerabilities
Vulnerabilities for packages: librechat, gemini-cli, vitess, homepage, kibana, pulumi, nemo, kubeflow-centraldashboard, cadence-web, opentelemetry-auto-instrumentations-node, renovate...
GHSA-2PR8-PHX7-X9H3 vulnerabilities
Vulnerabilities for packages: librechat, gemini-cli, vitess, homepage, kibana, pulumi, nemo, kubeflow-centraldashboard, cadence-web, opentelemetry-auto-instrumentations-node, renovate...
CVE-2026-44290 vulnerabilities
Vulnerabilities for packages: librechat, gemini-cli, vitess, homepage, kibana, pulumi, nemo, kubeflow-centraldashboard, cadence-web, opentelemetry-auto-instrumentations-node, renovate...
0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +929 more potentially affected by CVE-2026-44902 via @opentelemetry/auto-instrumentations-node (>=0.55.0, <=0.74.0)
@opentelemetry/auto-instrumentations-node NPM version =0.55.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.8.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.3.4-0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.1, =0.4.0, =0.4.0, =5.0.1-staging.f672fe79b213 and more Source cves:...
0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +929 more potentially affected by CVE-2026-44902 via @opentelemetry/auto-instrumentations-node (>=0.55.0, <=0.74.0)
@opentelemetry/auto-instrumentations-node NPM version =0.55.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.8.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.3.4-0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.1, =0.4.0, =0.4.0, =5.0.1-staging.f672fe79b213 and more Source cves:...
CVE-2026-41242 vulnerabilities
Vulnerabilities for packages: librechat, gemini-cli, langfuse, vitess, jitsucom-jitsu, langfuse-fips, kibana, pulumi, nemo, kubeflow-centraldashboard, opentelemetry-auto-instrumentations-node, renovate...
GHSA-XQ3M-2V4X-88GG vulnerabilities
Vulnerabilities for packages: librechat, gemini-cli, langfuse, vitess, jitsucom-jitsu, langfuse-fips, kibana, pulumi, nemo, kubeflow-centraldashboard, opentelemetry-auto-instrumentations-node, renovate...
GHSA-48C2-RRV3-QJMP vulnerabilities
Vulnerabilities for packages: semaphore, wazuh-dashboard, nextcloud-server, arangodb, langfuse, kubeflow-katib, drupal, redisinsight, opensearch-dashboards, prism, gitlab-rails-ce, tileserver-gl, lerna, argo-workflows, gemini-cli, tileserver-gl-fips, saf, gitlab-rails-ce-fips, vitess,...
CVE-2026-27903 vulnerabilities
Vulnerabilities for packages: librechat, semaphore, wazuh-dashboard, wazuh-dashboard-fips, pulumi, emscripten, authentik, arangodb, actions-runner, langfuse, kubeflow-katib, drupal, pnpm-stage0, tensorflow-cpu-jupyter, opensearch-dashboards, prism, gitlab-rails-ce, tileserver-gl, lerna,...
CVE-2026-27904 vulnerabilities
Vulnerabilities for packages: librechat, semaphore, wazuh-dashboard, wazuh-dashboard-fips, pulumi, emscripten, kubeflow-centraldashboard, authentik, arangodb, actions-runner, langfuse, kubeflow-katib, drupal, pnpm-stage0, tensorflow-cpu-jupyter, opensearch-dashboards, prism, gitlab-rails-ce,...
