CVE-2026-39407 vulnerabilities

Vulnerabilities for packages: langfuse-fips, gemini-cli, langfuse, opensearch-dashboards-fips, kibana, opensearch-dashboards, librechat...

CVE-2026-39410 vulnerabilities

Vulnerabilities for packages: langfuse-fips, gemini-cli, langfuse, opensearch-dashboards-fips, kibana, opensearch-dashboards, librechat...

CVE-2026-39409 vulnerabilities

Vulnerabilities for packages: langfuse-fips, gemini-cli, langfuse, opensearch-dashboards-fips, kibana, opensearch-dashboards, librechat...

GHSA-26PP-8WGV-HJVM vulnerabilities

Vulnerabilities for packages: langfuse-fips, gemini-cli, langfuse, opensearch-dashboards-fips, kibana, opensearch-dashboards, librechat...

GHSA-R5RP-J6WH-RVV4 vulnerabilities

Vulnerabilities for packages: langfuse-fips, gemini-cli, langfuse, opensearch-dashboards-fips, kibana, opensearch-dashboards, librechat...

GHSA-XF4J-XP2R-RQQX vulnerabilities

Vulnerabilities for packages: langfuse-fips, gemini-cli, langfuse, opensearch-dashboards-fips, kibana, opensearch-dashboards, librechat...

GHSA-XPCF-PG52-R92G vulnerabilities

Vulnerabilities for packages: langfuse-fips, gemini-cli, langfuse, opensearch-dashboards-fips, kibana, opensearch-dashboards, librechat...

CVE-2025-64340 FastMCP has a Command Injection vulnerability - Gemini CLI

FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run wit...

CVE-2025-64340 FastMCP has a Command Injection vulnerability - Gemini CLI

FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run wit...

GHSA-M8X7-R2RG-VH5G FastMCP has a Command Injection vulnerability - Gemini CLI

Server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run with a list argument, but on Windows the target CLIs often resolve to .cmd wrappers that are...

GHSA-27V5-C462-WPQ7 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, langfuse-fips, tileserver-gl, gemini-cli, langfuse, redisinsight, opensearch-dashboards-fips, thingsboard, code-server, kibana, saf, opensearch-dashboards, tileserver-gl-fips, vitess...

CVE-2026-4923 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, langfuse-fips, tileserver-gl, gemini-cli, langfuse, redisinsight, opensearch-dashboards-fips, thingsboard, code-server, kibana, saf, opensearch-dashboards, tileserver-gl-fips, vitess...

CVE-2026-4926 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, langfuse-fips, tileserver-gl, gemini-cli, langfuse, redisinsight, opensearch-dashboards-fips, thingsboard, code-server, kibana, saf, opensearch-dashboards, tileserver-gl-fips, vitess...