CLEANSTART-2026-RO58683 Security fixes in langfuse 3.210.0-r1

Package langfuse version 3.210.0-r1 fixes 4 vulnerabilities: ghsa-p6gq-j5cr-w38f, CVE-2026-41907, CVE-2026-53550, CVE-2026-59869...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in uuid-3.3.2.tgz

Summary IBM Watson Discovery Cartridge affected by vulnerability in uuid-3.3.2.tgz Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writ...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses uuid-9.0.1.tgz which is vulnerable to CVE-2026-41988, CVE-2026-41907

Summary IBM Maximo Application Suite - Visual Inspection component uses uuid-9.0.1.tgz which is vulnerable to CVE-2026-41988, CVE-2026-41907 , This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-41988 DESCRIPTION: uuid before...

Security Bulletin: There is a vulnerability in uuid-9.0.1.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-41907)

Summary There is a vulnerability in uuid-9.0.1.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses uuid-7.0.3.tgz, uuid-9.0.1.tgz which is vulnerable to CVE-2026-41907

Summary Security Bulletin: IBM Maximo Application Suite - Monitor Component uses uuid-7.0.3.tgz, uuid-9.0.1.tgz which is vulnerable to CVE-2026-41907. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation ...

CVE-2026-41907 vulnerabilities

Vulnerabilities for packages: code-server, argo-workflows, kubeflow-pipelines, renovate, langfuse, kubeflow-centraldashboard, py3-jupyterlab, nextcloud-server, saf, jitsucom-jitsu, npm, prism, sqlpad, opensearch-dashboards, kubeflow-katib...

Linux Distros Unpatched Vulnerability : CVE-2026-41907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes...

@accounter/modern-poalim-scraper (0.10.1-alpha-20250905202854-1612dbe0853c5d6e9f9ddff402868250fa642e59), @aleph-alpha/lib-http (1.4.5) +14 more potentially affected by CVE-2026-41907 +1 more via uuid (12.0.0)

uuid NPM version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on uuid and may be impacted: - @accounter/modern-poalim-scraper 0.10.1-alpha-20250905202854-1612dbe0853c5d6e9f9ddff402868250fa642e59 - @aleph-alpha/lib-http 1.4.5 -...

5w-logger (1.0.0), @0xpolygonid/js-kms-key-provider-lit-protocol (>=1.0.0, <=1.0.4) +736 more potentially affected by CVE-2026-41907 +1 more via uuid (13.0.0)

uuid NPM version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on uuid and may be impacted: - 5w-logger 1.0.0 - @0xpolygonid/js-kms-key-provider-lit-protocol =1.0.0, =1.35.0, =10.0.0, =10.0.0, =8.1.0, =13.0.0, =4.0.0, =2.0.26,...

@0xpolygonid/js-sdk (>=1.32.1, <=1.34.0), @142vip/common (>=0.0.1-alpha.9, <=0.0.1-alpha.15) +2865 more potentially affected by CVE-2026-41907 +1 more via uuid (>=11.0.0, <=11.1.0)

uuid NPM version =11.0.0, =1.32.1, =0.0.1-alpha.9, =0.0.3-alpha.1, =0.1.6-alpha.9, =0.0.1-alpha.0, =1.0.0-alpha.20, =2.16.1, =1.0.0-alpha.34, =0.1.0-alpha.1, =1.0.0, =0.24.1-20230627140514, =0.25.1-20250326172337, =0.24.1-20230627140514, =0.24.1-20231019080841 and more Source cves: CVE-2026-41907...

@0xpolygonid/js-sdk (>=1.32.1, <=1.34.0), @142vip/common (>=0.0.1-alpha.9, <=0.0.1-alpha.15) +2865 more potentially affected by CVE-2026-41907 via uuid (>=11.0.0, <=11.1.0)

uuid NPM version =11.0.0, =1.32.1, =0.0.1-alpha.9, =0.0.3-alpha.1, =0.1.6-alpha.9, =0.0.1-alpha.0, =1.0.0-alpha.20, =2.16.1, =1.0.0-alpha.34, =0.1.0-alpha.1, =1.0.0, =0.24.1-20230627140514, =0.25.1-20250326172337, =0.24.1-20230627140514, =0.24.1-20231019080841 and more Source cves: CVE-2026-41907...

1router (>=0.3.96, <=1.0.2), 3d-bin-packing-ts (>=1.0.0, <=1.0.1) +7654 more potentially affected by CVE-2026-41907 via uuid (>=12.0.0, <=13.0.2)

uuid NPM version =12.0.0, =0.3.96, =1.0.0, =2.1.0, =0.3.33, =0.5.0, =0.4.71, =0.0.1, =0.3.0, =0.4.0, =0.2.0, =0.0.6, =0.0.8-rc.1 and more Source cves: CVE-2026-41907 Source advisory: SNYK:JS-UUID-16133035...