CVE-2026-45820 vulnerabilities

Vulnerabilities for packages: langfuse, tileserver-gl, tileserver-gl-fips, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, langfuse-fips, librechat, lambda-nodejs...

GHSA-PX8P-9VWX-VF98 vulnerabilities

Vulnerabilities for packages: langfuse, tileserver-gl, tileserver-gl-fips, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, langfuse-fips, librechat, lambda-nodejs...

AWS VDP: Command Injection via Unsanitized Bundling Options in `aws-cdk-lib/aws-lambda-nodejs`

Asset: aws-cdk-lib npm package, source: https://github.com/aws/aws-cdk Severity: High CWE: CWE-78 Improper Neutralization of Special Elements used in an OS Command, 'OS Command Injection' --- Summary The NodejsFunction construct in aws-cdk-lib/aws-lambda-nodejs constructs a shell command string...