CVE-2026-73566 vulnerabilities

Vulnerabilities for packages: lerna, saf, kubeflow-centraldashboard, node-gyp, npm, prism, pulumi, code-server, opensearch-dashboards, renovate, sqlpad...

GHSA-38GX-CFQF-F652 vulnerabilities

Vulnerabilities for packages: awx, prism, opensearch-dashboards, opensearch-dashboards-fips, langfuse-fips, lerna, jitsucom-jitsu, nextcloud-server, redisinsight, semaphore, wazuh-dashboard-fips, wazuh-dashboard, librechat, kubeflow-centraldashboard, langfuse, kibana...

CVE-2026-67314 vulnerabilities

Vulnerabilities for packages: awx, prism, opensearch-dashboards, opensearch-dashboards-fips, langfuse-fips, lerna, jitsucom-jitsu, nextcloud-server, redisinsight, semaphore, wazuh-dashboard-fips, wazuh-dashboard, librechat, kubeflow-centraldashboard, langfuse, kibana...

GHSA-38GX-CFQF-F652 vulnerabilities

Vulnerabilities for packages: lerna, nextcloud-server, langfuse, kubeflow-centraldashboard, prism, opensearch-dashboards, jitsucom-jitsu...

CVE-2026-67314 vulnerabilities

Vulnerabilities for packages: lerna, nextcloud-server, langfuse, kubeflow-centraldashboard, prism, opensearch-dashboards, jitsucom-jitsu...

CVE-2026-69192 vulnerabilities

Vulnerabilities for packages: lerna, saf, langfuse, kubeflow-pipelines, npm, prism, pulumi, code-server, opensearch-dashboards, renovate, sqlpad...

GHSA-22JQ-VG5J-6VGG vulnerabilities

Vulnerabilities for packages: lerna, saf, langfuse, kubeflow-pipelines, npm, prism, pulumi, code-server, opensearch-dashboards, renovate, sqlpad...

CVE-2026-54272 vulnerabilities

Vulnerabilities for packages: lerna, saf, langfuse, kubeflow-pipelines, npm, prism, pulumi, code-server, opensearch-dashboards, renovate, sqlpad...

GHSA-4XRF-JV44-H6HH vulnerabilities

Vulnerabilities for packages: lerna, saf, langfuse, kubeflow-pipelines, npm, prism, pulumi, code-server, opensearch-dashboards, renovate, sqlpad...

CVE-2026-69198 vulnerabilities

Vulnerabilities for packages: lerna, saf, langfuse, kubeflow-pipelines, npm, prism, pulumi, code-server, opensearch-dashboards, renovate, sqlpad...

GHSA-MWP4-54F8-5FHR vulnerabilities

Vulnerabilities for packages: lerna, saf, langfuse, kubeflow-pipelines, npm, prism, pulumi, code-server, opensearch-dashboards, renovate, sqlpad...

Malicious code in @ornikar/lerna-config (npm)

npm/@ornikar/lerna-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...

CVE-2026-25547 vulnerabilities

Vulnerabilities for packages: node-gyp, drupal, pulumi, lerna, sqlpad, renovate, librechat, npm, actions-runner...

org.webjars.npm:canvas (>=2.5.0, <=2.6.0), org.webjars.npm:color-thief (2.2.5) +12 more potentially affected by CVE-2026-23745 via org.webjars.npm:tar (>=0.1.20, <=4.4.19)

org.webjars.npm:tar MAVEN version =0.1.20, =2.5.0, =0.97.5, =0.2.0, =3.4.0, =0.6.19, =2.0.0, =3.1.4, =3.4.1 - org.webjars.npm:tar.gz 1.0.7 Source cves: CVE-2026-23745 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15032661...

CVE-2025-54371 vulnerabilities

Vulnerabilities for packages: lerna, kubeflow-centraldashboard, saf...

CVE-2025-54371 vulnerabilities

Vulnerabilities for packages: saf, kubeflow-centraldashboard, lerna...

CVE-2025-64756 vulnerabilities

Vulnerabilities for packages: lerna, py3-jupyterlab, ts-patch, saf, node-gyp, prism, npm, pulumi...

GHSA-5J98-MCP5-4VW2 vulnerabilities

Vulnerabilities for packages: lerna, py3-jupyterlab, ts-patch, saf, node-gyp, prism, npm, pulumi...

CVE-2025-64756 vulnerabilities

Vulnerabilities for packages: node-gyp, prism, gitlab-rails-ce, drupal, pulumi, lerna, ts-patch, tensorflow-cpu-jupyter, saf, arangodb, npm, actions-runner, py3-jupyterlab, gitlab-rails-ce-fips...

GHSA-5J98-MCP5-4VW2 vulnerabilities

Vulnerabilities for packages: node-gyp, prism, gitlab-rails-ce, drupal, pulumi, lerna, ts-patch, tensorflow-cpu-jupyter, saf, arangodb, npm, actions-runner, py3-jupyterlab, gitlab-rails-ce-fips...