CVE-2026-67317 vulnerabilities

Vulnerabilities for packages: lerna, langfuse, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, kubeflow-centraldashboard...

GHSA-6HQM-HM2V-3P2P vulnerabilities

Vulnerabilities for packages: lerna, langfuse, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, kubeflow-centraldashboard...

CVE-2026-67313 vulnerabilities

Vulnerabilities for packages: lerna, langfuse, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, kubeflow-centraldashboard...

CVE-2026-67318 vulnerabilities

Vulnerabilities for packages: lerna, langfuse, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, kubeflow-centraldashboard...

CVE-2026-67320 vulnerabilities

Vulnerabilities for packages: lerna, langfuse, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, kubeflow-centraldashboard...

GHSA-68JP-44VC-2X5H vulnerabilities

Vulnerabilities for packages: lerna, langfuse, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, kubeflow-centraldashboard...

GHSA-FQJ3-H9PC-443H vulnerabilities

Vulnerabilities for packages: lerna, langfuse, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, kubeflow-centraldashboard...

GHSA-FQ2J-3J99-RX65 vulnerabilities

Vulnerabilities for packages: lerna, langfuse, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, kubeflow-centraldashboard...

Mozilla: Stored XSS on the public Pontoon dashboards: the latest-activity tooltip re-parses a contributor's account address as HTML

A stored cross-site scripting vulnerability was discovered in public dashboards where contributor-supplied data values were concatenated into markup without proper encoding. An attacker could register an account with a malicious script in the email address field, which would then execute in the...

CVE-2026-67312 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, azurite, redisinsight, gitlab-rails-ce-fips, langfuse-fips, awx, wazuh-dashboard-fips, lerna, librechat, opensearch-dashboards-fips, semaphore, kibana, wazuh-dashboard, arangodb, opensearch-dashboards, prism, nextcloud-server,...

GHSA-4WW2-RJH2-XPV9 vulnerabilities

Vulnerabilities for packages: lerna, langfuse, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, kubeflow-centraldashboard...

CVE-2026-67312 vulnerabilities

Vulnerabilities for packages: lerna, langfuse, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, kubeflow-centraldashboard...

CVE-2026-67316 vulnerabilities

Vulnerabilities for packages: lerna, langfuse, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, kubeflow-centraldashboard...

thingsboard v4.3.1.4

Open-source IoT platform for data collection, processing, visualization, and device management. 💡 Get started • 🌐 Website • 📚 Documentation • 📔 Blog • 🔗 LinkedIn 🚀 Installation options Install ThingsBoard on-premises or use ThingsBoard Cloud. 💡 Getting started with ThingsBoard Check out our Getti...

Malcolm v26.08.0

Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...

Malcolm v26.08.0

Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...

CVE-2026-77811

Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...

EUVD-2026-64129

Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...

CVE-2026-77811 Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards

Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...

CVE-2026-77811

Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...