107 matches found
CVE-2026-69198 vulnerabilities
Vulnerabilities for packages: npm, lerna, prism, pulumi, sqlpad, opensearch-dashboards, code-server, kubeflow-pipelines, langfuse, renovate, saf...
GHSA-MWP4-54F8-5FHR vulnerabilities
Vulnerabilities for packages: npm, lerna, prism, pulumi, sqlpad, opensearch-dashboards, code-server, kubeflow-pipelines, langfuse, renovate, saf...
CVE-2026-69192 vulnerabilities
Vulnerabilities for packages: npm, lerna, prism, pulumi, sqlpad, opensearch-dashboards, code-server, kubeflow-pipelines, langfuse, renovate, saf...
GHSA-4XRF-JV44-H6HH vulnerabilities
Vulnerabilities for packages: npm, lerna, prism, pulumi, sqlpad, opensearch-dashboards, code-server, kubeflow-pipelines, langfuse, renovate, saf...
Malicious code in @ornikar/lerna-config (npm)
npm/@ornikar/lerna-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...
CVE-2026-25547 vulnerabilities
Vulnerabilities for packages: librechat, npm, node-gyp, drupal, actions-runner, renovate, pulumi, sqlpad, lerna...
org.webjars.npm:canvas (>=2.5.0, <=2.6.0), org.webjars.npm:color-thief (2.2.5) +12 more potentially affected by CVE-2026-23745 via org.webjars.npm:tar (>=0.1.20, <=4.4.19)
org.webjars.npm:tar MAVEN version =0.1.20, =2.5.0, =0.97.5, =0.2.0, =3.4.0, =0.6.19, =2.0.0, =3.1.4, =3.4.1 - org.webjars.npm:tar.gz 1.0.7 Source cves: CVE-2026-23745 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15032661...
CVE-2025-54371 vulnerabilities
Vulnerabilities for packages: lerna, saf, kubeflow-centraldashboard...
CVE-2025-54371 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, lerna, saf...
CVE-2025-64756 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, node-gyp, npm, lerna, prism, pulumi, py3-jupyterlab, ts-patch, saf...
GHSA-5J98-MCP5-4VW2 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, node-gyp, npm, lerna, prism, pulumi, py3-jupyterlab, ts-patch, saf...
CVE-2025-64756 vulnerabilities
Vulnerabilities for packages: npm, gitlab-rails-ce, tensorflow-cpu-jupyter, node-gyp, arangodb, drupal, actions-runner, jupyter-base-notebook, prism, ts-patch, saf, pulumi, gitlab-rails-ce-fips, py3-jupyterlab, lerna...
GHSA-5J98-MCP5-4VW2 vulnerabilities
Vulnerabilities for packages: npm, gitlab-rails-ce, tensorflow-cpu-jupyter, node-gyp, arangodb, drupal, actions-runner, jupyter-base-notebook, prism, ts-patch, saf, pulumi, gitlab-rails-ce-fips, py3-jupyterlab, lerna...
CVE-2025-58754 vulnerabilities
Vulnerabilities for packages: grafana-image-renderer, lerna, jitsucom-jitsu, prism, saf, tileserver-gl, opensearch-dashboards, kubeflow-pipelines, kubeflow-katib, kubeflow-centraldashboard...
GHSA-4HJH-WCWX-XVWJ vulnerabilities
Vulnerabilities for packages: grafana-image-renderer, lerna, jitsucom-jitsu, prism, saf, tileserver-gl, opensearch-dashboards, kubeflow-pipelines, kubeflow-katib, kubeflow-centraldashboard...
GHSA-4HJH-WCWX-XVWJ vulnerabilities
Vulnerabilities for packages: airflow, gitlab-rails-ce, grafana-image-renderer, kubeflow-centraldashboard, prism, redisinsight, awx, kibana, tileserver-gl-fips, opensearch-dashboards-fips, saf, gitlab-rails-ce-fips, tileserver-gl, kubeflow-pipelines, jitsucom-jitsu, opensearch-dashboards, lerna,...
CVE-2025-58754 vulnerabilities
Vulnerabilities for packages: airflow, gitlab-rails-ce, grafana-image-renderer, kubeflow-centraldashboard, prism, redisinsight, awx, kibana, tileserver-gl-fips, opensearch-dashboards-fips, saf, gitlab-rails-ce-fips, tileserver-gl, kubeflow-pipelines, jitsucom-jitsu, opensearch-dashboards, lerna,...
MAL-2025-25169 Malicious code in lerna-test-app1 (npm)
The package lerna-test-app1 was found to contain malicious code...