CVE-2026-84942

This stored cross-site scripting (XSS) vulnerability affects OpenSearch Dashboards . The root cause is a flaw in the checkForFunctionProperty validation routine within the Vega expression function, which failed to recurse into arrays of objects, allowing a function property nested inside an array...

EUVD-2026-74074

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

Malcolm

Malcolm Malcolm 是一套强大的网络流量分析工具套件，其设计目标如下： 易于使用 – Malcolm 接受全流量数据包捕获（PCAP）文件、Zeek 日志和 Suricata 告警等形式的数据。这些内容可通过简单的浏览器界面上传，或使用轻量级转发器进行被动实时捕获并转发至 Malcolm。无论采用哪种方式，数据都会被自动归一化、丰富化并关联以进行分析。 强大的流量分析能力 – 通过两个直观界面提供网络通信可见性：OpenSearch Dashboards（一个灵活的数据可视化插件，内置数十个预建仪表板，可概览网络协议）和...

GHSA-JQFF-G426-HQXP vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, nextcloud-server, tensorflow-gpu-jupyter, prism, vitess, gitlab-rails-ce-fips, yaml-language-server, kibana, unleash, tileserver-gl-fips, wazuh-dashboard, tileserver-gl, langfuse-fips, keep-fips,...

GHSA-F65P-4M7J-42XC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, nextcloud-server, tensorflow-gpu-jupyter, prism, vitess, gitlab-rails-ce-fips, yaml-language-server, kibana, unleash, tileserver-gl-fips, wazuh-dashboard, tileserver-gl, langfuse-fips, keep-fips,...

GHSA-FPH4-WMHF-6FWF vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, nextcloud-server, tensorflow-gpu-jupyter, prism, vitess, gitlab-rails-ce-fips, yaml-language-server, kibana, unleash, tileserver-gl-fips, wazuh-dashboard, tileserver-gl, langfuse-fips, keep-fips, keep,...

GHSA-5JGF-P345-68V8 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, nextcloud-server, prism, vitess, gitlab-rails-ce-fips, yaml-language-server, kibana, unleash, tileserver-gl-fips, wazuh-dashboard, tileserver-gl, langfuse-fips, keep-fips, keep, unleash-proxy, unleash-fips,...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, pelias-api, sqlpad, prism, kibana, unleash, renovate, tileserver-gl-fips, wazuh-dashboard, code-server, tileserver-gl, langfuse-fips, redisinsight, gitlab-rails-ce, arangodb, unleash-proxy,...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, tensorflow-gpu-jupyter, pelias-api, sqlpad, prism, gitlab-rails-ce-fips, kibana, unleash, renovate, tileserver-gl-fips, wazuh-dashboard, code-server, tileserver-gl, langfuse-fips, redisinsight,...

CVE-2026-75899 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, nextcloud-server, tensorflow-gpu-jupyter, prism, vitess, gitlab-rails-ce-fips, yaml-language-server, kibana, unleash, tileserver-gl-fips, wazuh-dashboard, tileserver-gl, langfuse-fips, keep-fips, keep,...

CVE-2026-82417 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, tensorflow-gpu-jupyter, pelias-api, sqlpad, prism, gitlab-rails-ce-fips, kibana, unleash, renovate, tileserver-gl-fips, wazuh-dashboard, code-server, tileserver-gl, langfuse-fips, redisinsight,...

CVE-2026-75931 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, nextcloud-server, prism, vitess, gitlab-rails-ce-fips, yaml-language-server, kibana, unleash, tileserver-gl-fips, wazuh-dashboard, tileserver-gl, langfuse-fips, keep-fips, keep, unleash-proxy, unleash-fips,...

CVE-2026-82562 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, pelias-api, sqlpad, prism, kibana, unleash, renovate, tileserver-gl-fips, wazuh-dashboard, code-server, tileserver-gl, langfuse-fips, redisinsight, gitlab-rails-ce, arangodb, unleash-proxy,...

CVE-2026-75975 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, nextcloud-server, tensorflow-gpu-jupyter, prism, vitess, gitlab-rails-ce-fips, yaml-language-server, kibana, unleash, tileserver-gl-fips, wazuh-dashboard, tileserver-gl, langfuse-fips, keep-fips,...

CVE-2026-76172 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, nextcloud-server, tensorflow-gpu-jupyter, prism, vitess, gitlab-rails-ce-fips, yaml-language-server, kibana, unleash, tileserver-gl-fips, wazuh-dashboard, tileserver-gl, langfuse-fips, keep-fips,...

CVE-2026-67315 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, nextcloud-server, prism, jitsucom-jitsu, gitlab-rails-ce-fips, kibana, librechat, wazuh-dashboard, langfuse-fips, redisinsight, semaphore, gitlab-rails-ce, lerna, awx, kubeflow-centraldashboard,...

GHSA-6HQM-HM2V-3P2P vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, nextcloud-server, prism, jitsucom-jitsu, gitlab-rails-ce-fips, kibana, librechat, wazuh-dashboard, langfuse-fips, redisinsight, semaphore, gitlab-rails-ce, lerna, awx, kubeflow-centraldashboard,...

CVE-2026-67313 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, nextcloud-server, prism, jitsucom-jitsu, gitlab-rails-ce-fips, kibana, librechat, wazuh-dashboard, langfuse-fips, redisinsight, semaphore, gitlab-rails-ce, arangodb, lerna, awx, kubeflow-centraldashboard,...

GHSA-68JP-44VC-2X5H vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, nextcloud-server, prism, jitsucom-jitsu, gitlab-rails-ce-fips, kibana, librechat, wazuh-dashboard, langfuse-fips, redisinsight, semaphore, gitlab-rails-ce, lerna, awx, kubeflow-centraldashboard,...

GHSA-9WX3-P993-35VP vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, langfuse, nextcloud-server, prism, jitsucom-jitsu, gitlab-rails-ce-fips, kibana, librechat, wazuh-dashboard, langfuse-fips, redisinsight, semaphore, gitlab-rails-ce, arangodb, lerna, awx, kubeflow-centraldashboard,...