184 matches found
GHSA-X5FP-WJ9C-MXMX vulnerabilities
Vulnerabilities for packages: kibana, dotstatsuite-supercore, tileserver-gl-fips, gitlab-rails-ce, sqlpad, opensearch-dashboards, unleash-fips, langfuse, tileserver-gl, arangodb, wazuh-dashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, code-server, prism, azurite, unleash, unleash-proxy...
GHSA-4MJR-XMP4-GH2G vulnerabilities
Vulnerabilities for packages: kibana, dotstatsuite-supercore, tileserver-gl-fips, gitlab-rails-ce, sqlpad, opensearch-dashboards, unleash-fips, langfuse, tileserver-gl, arangodb, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips, wazuh-dashboard-fips, code-server, prism, azurite,...
GHSA-4MJR-XMP4-GH2G vulnerabilities
Vulnerabilities for packages: langfuse, renovate, json-server, code-server, opensearch-dashboards, prism, sqlpad, kubeflow-centraldashboard, tileserver-gl...
GHSA-X5FP-WJ9C-MXMX vulnerabilities
Vulnerabilities for packages: langfuse, renovate, json-server, code-server, opensearch-dashboards, prism, sqlpad, kubeflow-centraldashboard, tileserver-gl...
CVE-2026-82417 vulnerabilities
Vulnerabilities for packages: langfuse, renovate, json-server, code-server, opensearch-dashboards, prism, sqlpad, kubeflow-centraldashboard, tileserver-gl...
CVE-2026-82562 vulnerabilities
Vulnerabilities for packages: langfuse, renovate, json-server, code-server, opensearch-dashboards, prism, sqlpad, kubeflow-centraldashboard, tileserver-gl...
CVE-2026-73566 vulnerabilities
Vulnerabilities for packages: renovate, pulumi, node-gyp, code-server, npm, opensearch-dashboards, prism, sqlpad, saf, kubeflow-centraldashboard, lerna...
JLSEC-2026-1274 code-server's session cookie can be extracted by having user visit specially crafted proxy URL
Summary A maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Details Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL https:///proxy/[email protected]/path would be...
GHSA-22JQ-VG5J-6VGG vulnerabilities
Vulnerabilities for packages: langfuse, renovate, pulumi, code-server, npm, opensearch-dashboards, prism, kubeflow-pipelines, sqlpad, saf, lerna...
CVE-2026-69192 vulnerabilities
Vulnerabilities for packages: langfuse, renovate, pulumi, code-server, npm, opensearch-dashboards, prism, kubeflow-pipelines, sqlpad, saf, lerna...
CVE-2026-54272 vulnerabilities
Vulnerabilities for packages: langfuse, renovate, pulumi, code-server, npm, opensearch-dashboards, prism, kubeflow-pipelines, sqlpad, saf, lerna...
GHSA-MWP4-54F8-5FHR vulnerabilities
Vulnerabilities for packages: langfuse, renovate, pulumi, code-server, npm, opensearch-dashboards, prism, kubeflow-pipelines, sqlpad, saf, lerna...
CVE-2026-69198 vulnerabilities
Vulnerabilities for packages: langfuse, renovate, pulumi, code-server, npm, opensearch-dashboards, prism, kubeflow-pipelines, sqlpad, saf, lerna...
GHSA-4XRF-JV44-H6HH vulnerabilities
Vulnerabilities for packages: langfuse, renovate, pulumi, code-server, npm, opensearch-dashboards, prism, kubeflow-pipelines, sqlpad, saf, lerna...
CVE-2026-14643 vulnerabilities
Vulnerabilities for packages: code-server, vitess, kibana, langfuse, renovate, langfuse-fips, pelias-api...
GHSA-JR45-8VMC-QM54 vulnerabilities
Vulnerabilities for packages: code-server, vitess, kibana, langfuse, renovate, langfuse-fips, pelias-api...
GHSA-JR45-8VMC-QM54 vulnerabilities
Vulnerabilities for packages: langfuse, code-server, vitess, renovate...
CVE-2026-16729 vulnerabilities
Vulnerabilities for packages: langfuse, renovate, pulumi, code-server, npm, prism, vitess, saf...