GHSA-PX8P-9VWX-VF98 vulnerabilities

Vulnerabilities for packages: librechat, lambda-nodejs, langfuse, tileserver-gl-fips, tileserver-gl, langfuse-fips...

CVE-2026-45820 vulnerabilities

Vulnerabilities for packages: librechat, lambda-nodejs, langfuse, tileserver-gl-fips, tileserver-gl, langfuse-fips...

AWS VDP: Command Injection via Unsanitized Bundling Options in `aws-cdk-lib/aws-lambda-nodejs`

Asset: aws-cdk-lib npm package, source: https://github.com/aws/aws-cdk Severity: High CWE: CWE-78 Improper Neutralization of Special Elements used in an OS Command, 'OS Command Injection' --- Summary The NodejsFunction construct in aws-cdk-lib/aws-lambda-nodejs constructs a shell command string...