GHSA-RP42-5VXX-QPWR vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, code-server, opensearch-dashboards-fips, kibana, wazuh-dashboard...

GHSA-23C5-XMQV-RM74 vulnerabilities

Vulnerabilities for packages: eslint, kubeflow-centraldashboard, lerna, vitess, pulumi, py3-jupyterlab, serve, tileserver-gl, code-server, kubeflow-katib, pnpm-stage0, argo-workflows, prism, node-gyp, renovate, ts-patch, npm, opensearch-dashboards, saf...

GHSA-7R86-CG39-JMMJ vulnerabilities

Vulnerabilities for packages: kubeflow-katib, eslint, renovate, tileserver-gl, opensearch-dashboards, lerna, vitess, code-server, serve, ts-patch, npm, pnpm-stage0, pulumi, argo-workflows, py3-jupyterlab, node-gyp, saf, prism...

CVE-2026-27699 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, code-server, langfuse...

CVE-2026-27903 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, eslint, renovate, tileserver-gl, opensearch-dashboards, lerna, vitess, code-server, serve, ts-patch, npm, pnpm-stage0, pulumi, argo-workflows, py3-jupyterlab, node-gyp, saf, prism...

CVE-2026-27904 vulnerabilities

Vulnerabilities for packages: eslint, kubeflow-centraldashboard, lerna, vitess, pulumi, py3-jupyterlab, serve, tileserver-gl, code-server, kubeflow-katib, pnpm-stage0, argo-workflows, prism, node-gyp, renovate, ts-patch, npm, opensearch-dashboards, saf...

GHSA-5RQ4-664W-9X2C vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, code-server, langfuse...

GHSA-7R86-CG39-JMMJ vulnerabilities

Vulnerabilities for packages: renovate, pulumi, librechat, gitlab-rails-ce-fips, arangodb, authentik-fips, actions-runner, wazuh-dashboard, drupal, authentik, code-server, tensorflow-cpu-jupyter, opensearch-dashboards-fips, emscripten, semaphore, kibana, opentelemetry-auto-instrumentations-node,...

CVE-2026-27903 vulnerabilities

Vulnerabilities for packages: renovate, pulumi, librechat, gitlab-rails-ce-fips, arangodb, authentik-fips, actions-runner, wazuh-dashboard, drupal, authentik, code-server, tensorflow-cpu-jupyter, opensearch-dashboards-fips, emscripten, semaphore, kibana, opentelemetry-auto-instrumentations-node,...

GHSA-5RQ4-664W-9X2C vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, code-server, langfuse, opensearch-dashboards-fips, kibana...

CVE-2026-27904 vulnerabilities

Vulnerabilities for packages: renovate, pulumi, librechat, gitlab-rails-ce-fips, arangodb, authentik-fips, actions-runner, wazuh-dashboard, drupal, authentik, code-server, tensorflow-cpu-jupyter, opensearch-dashboards-fips, emscripten, semaphore, kibana, kubeflow-centraldashboard,...

CVE-2026-27699 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, code-server, langfuse, opensearch-dashboards-fips, kibana...

GHSA-23C5-XMQV-RM74 vulnerabilities

Vulnerabilities for packages: renovate, pulumi, librechat, gitlab-rails-ce-fips, arangodb, authentik-fips, actions-runner, wazuh-dashboard, drupal, authentik, code-server, tensorflow-cpu-jupyter, opensearch-dashboards-fips, emscripten, semaphore, kibana, kubeflow-centraldashboard,...

GHSA-G9MF-H72J-4RW9 vulnerabilities

Vulnerabilities for packages: code-server, jitsucom-jitsu, renovate, langfuse...

CVE-2026-22036 vulnerabilities

Vulnerabilities for packages: code-server, jitsucom-jitsu, renovate, langfuse...

GHSA-G9MF-H72J-4RW9 vulnerabilities

Vulnerabilities for packages: renovate, langfuse-fips, code-server, langfuse, librechat, jitsucom-jitsu, gemini-cli, kibana...

CVE-2026-22036 vulnerabilities

Vulnerabilities for packages: renovate, langfuse-fips, code-server, langfuse, librechat, jitsucom-jitsu, gemini-cli, kibana...

CVE-2023-49788

Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated Collabora Online server, the Built-in CODE Server richdocumentscode is run without chroot sandboxing. Vulnerable versions of the richdocumentscode app can be susceptible to attac...

CVE-2025-66208

Collabora Online - Built-in CODE Server richdocumentscode provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE OS Command Injection in richdocumentscode proxy. Users of Nextclou...

CVE-2025-66208 Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy

Collabora Online - Built-in CODE Server richdocumentscode provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE OS Command Injection in richdocumentscode proxy. Users of Nextclou...