18 matches found
GHSA-QHR7-859C-M2P7 vulnerabilities
Vulnerabilities for packages: actions-runner, graalvm, langfuse, commitizen, prism, foxx-cli, authentik, commercial-gitlab-rails-ee-fips, lerna, opensearch-dashboards, opensearch-dashboards-fips, kibana, wazuh-dashboard, lambda-nodejs, dotstatsuite-supercore, redisinsight, jupyter-base-notebook,...
GHSA-Q2HR-2G5M-VWHR vulnerabilities
Vulnerabilities for packages: actions-runner, graalvm, langfuse, commitizen, prism, foxx-cli, authentik, commercial-gitlab-rails-ee-fips, lerna, opensearch-dashboards, opensearch-dashboards-fips, kibana, wazuh-dashboard, lambda-nodejs, dotstatsuite-supercore, redisinsight, jupyter-base-notebook,...
CVE-2026-102277 vulnerabilities
Vulnerabilities for packages: actions-runner, graalvm, langfuse, commitizen, prism, foxx-cli, authentik, commercial-gitlab-rails-ee-fips, lerna, opensearch-dashboards, opensearch-dashboards-fips, kibana, wazuh-dashboard, lambda-nodejs, dotstatsuite-supercore, redisinsight, jupyter-base-notebook,...
CVE-2026-102278 vulnerabilities
Vulnerabilities for packages: actions-runner, graalvm, langfuse, commitizen, prism, foxx-cli, authentik, commercial-gitlab-rails-ee-fips, lerna, opensearch-dashboards, opensearch-dashboards-fips, kibana, wazuh-dashboard, lambda-nodejs, dotstatsuite-supercore, redisinsight, jupyter-base-notebook,...
Malicious code in auto-instrumentations-node (npm)
--- Credit: OpenSSF source...
0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +1559 more potentially affected by CVE-2026-44902 via @opentelemetry/auto-instrumentations-node (>=0.16.0, <=0.74.0)
@opentelemetry/auto-instrumentations-node NPM version =0.16.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.8.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.2.0, =0.2.0, =0.0.1, =0.3.4-0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =5.0.1-staging.f17326334 and more Source cves:...
CVE-2026-44288 vulnerabilities
Vulnerabilities for packages: cadence-web, homepage, kibana, librechat, kubeflow-centraldashboard, pulumi, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
CVE-2026-44290 vulnerabilities
Vulnerabilities for packages: cadence-web, homepage, kibana, librechat, kubeflow-centraldashboard, pulumi, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
CVE-2026-44292 vulnerabilities
Vulnerabilities for packages: cadence-web, homepage, kibana, librechat, kubeflow-centraldashboard, pulumi, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
GHSA-2PR8-PHX7-X9H3 vulnerabilities
Vulnerabilities for packages: cadence-web, homepage, kibana, librechat, kubeflow-centraldashboard, pulumi, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +967 more potentially affected by CVE-2026-44902 via @opentelemetry/auto-instrumentations-node (>=0.55.0, <=0.74.0)
@opentelemetry/auto-instrumentations-node NPM version =0.55.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.8.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.3.4-0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.1, =0.4.0, =0.4.0, =5.0.1-staging.f672fe79b213 and more Source cves:...
0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +967 more potentially affected by CVE-2026-44902 via @opentelemetry/auto-instrumentations-node (>=0.55.0, <=0.74.0)
@opentelemetry/auto-instrumentations-node NPM version =0.55.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.8.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.3.4-0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.1, =0.4.0, =0.4.0, =5.0.1-staging.f672fe79b213 and more Source cves:...
CVE-2026-41242 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, kibana, langfuse, librechat, kubeflow-centraldashboard, pulumi, langfuse-fips, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
GHSA-XQ3M-2V4X-88GG vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, kibana, langfuse, librechat, kubeflow-centraldashboard, pulumi, langfuse-fips, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
GHSA-48C2-RRV3-QJMP vulnerabilities
Vulnerabilities for packages: drupal, langfuse, tileserver-gl, prism, gemini-cli, semaphore, lerna, opensearch-dashboards, opensearch-dashboards-fips, kibana, wazuh-dashboard, argo-workflows, redisinsight, vitess, nextcloud-server, gitlab-rails-ce, gitlab-rails-ce-fips, kubeflow-katib,...
CVE-2026-27904 vulnerabilities
Vulnerabilities for packages: actions-runner, code-server, graalvm, py3-jupyterlab, drupal, langfuse, tileserver-gl, emscripten, prism, node-gyp, serve, authentik, eslint, semaphore, lerna, opensearch-dashboards, opensearch-dashboards-fips, kibana, wazuh-dashboard, argo-workflows, pnpm-stage0,...
CVE-2026-27903 vulnerabilities
Vulnerabilities for packages: actions-runner, code-server, graalvm, py3-jupyterlab, drupal, langfuse, tileserver-gl, emscripten, prism, node-gyp, serve, authentik, eslint, semaphore, lerna, opensearch-dashboards, opensearch-dashboards-fips, kibana, wazuh-dashboard, argo-workflows, pnpm-stage0,...
