CVE-2026-102278 vulnerabilities

Vulnerabilities for packages: verdaccio, langfuse, actions-runner, langfuse-fips, lambda-nodejs, authentik-fips, prism, graalvm, npm, opentelemetry-auto-instrumentations-node, rancher-api-ui, jupyter-base-notebook, arangodb, unleash-proxy, redisinsight, nextcloud-server, wazuh-dashboard,...

GHSA-QHR7-859C-M2P7 vulnerabilities

Vulnerabilities for packages: verdaccio, langfuse, actions-runner, langfuse-fips, lambda-nodejs, authentik-fips, prism, graalvm, npm, opentelemetry-auto-instrumentations-node, rancher-api-ui, jupyter-base-notebook, arangodb, unleash-proxy, redisinsight, nextcloud-server, wazuh-dashboard,...

CVE-2026-102277 vulnerabilities

Vulnerabilities for packages: verdaccio, langfuse, actions-runner, langfuse-fips, lambda-nodejs, authentik-fips, prism, graalvm, npm, opentelemetry-auto-instrumentations-node, rancher-api-ui, jupyter-base-notebook, arangodb, unleash-proxy, redisinsight, nextcloud-server, wazuh-dashboard,...

GHSA-Q2HR-2G5M-VWHR vulnerabilities

Vulnerabilities for packages: verdaccio, langfuse, actions-runner, langfuse-fips, lambda-nodejs, authentik-fips, prism, graalvm, npm, opentelemetry-auto-instrumentations-node, rancher-api-ui, jupyter-base-notebook, arangodb, unleash-proxy, redisinsight, nextcloud-server, wazuh-dashboard,...

GHSA-99F4-GRH7-6PCQ vulnerabilities

Vulnerabilities for packages: pulumi, langfuse, jitsucom-jitsu, cadence-web, gemini-cli, opentelemetry-auto-instrumentations-node, kibana, langfuse-fips...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +1517 more potentially affected by CVE-2026-44902 via @opentelemetry/auto-instrumentations-node (>=0.16.0, <=0.74.0)

@opentelemetry/auto-instrumentations-node NPM version =0.16.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.8.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.2.0, =0.2.0, =0.0.1, =0.3.4-0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =5.0.1-staging.f17326334 and more Source cves:...

CVE-2026-44288 vulnerabilities

Vulnerabilities for packages: pulumi, cadence-web, librechat, nemo, gemini-cli, renovate, opentelemetry-auto-instrumentations-node, vitess, kibana, homepage, kubeflow-centraldashboard...

GHSA-685M-2W69-288Q vulnerabilities

Vulnerabilities for packages: pulumi, cadence-web, librechat, nemo, gemini-cli, renovate, opentelemetry-auto-instrumentations-node, vitess, kibana, homepage, kubeflow-centraldashboard...

GHSA-66FF-XGX4-VCHM vulnerabilities

Vulnerabilities for packages: pulumi, cadence-web, librechat, nemo, gemini-cli, renovate, opentelemetry-auto-instrumentations-node, vitess, kibana, homepage, kubeflow-centraldashboard...

CVE-2026-44294 vulnerabilities

Vulnerabilities for packages: pulumi, cadence-web, librechat, nemo, gemini-cli, renovate, opentelemetry-auto-instrumentations-node, vitess, kibana, homepage, kubeflow-centraldashboard...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +929 more potentially affected by CVE-2026-44902 via @opentelemetry/auto-instrumentations-node (>=0.55.0, <=0.74.0)

@opentelemetry/auto-instrumentations-node NPM version =0.55.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.8.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.3.4-0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.1, =0.4.0, =0.4.0, =5.0.1-staging.f672fe79b213 and more Source cves:...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +929 more potentially affected by CVE-2026-44902 via @opentelemetry/auto-instrumentations-node (>=0.55.0, <=0.74.0)

@opentelemetry/auto-instrumentations-node NPM version =0.55.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.8.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.3.4-0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.1, =0.4.0, =0.4.0, =5.0.1-staging.f672fe79b213 and more Source cves:...

GHSA-48C2-RRV3-QJMP vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips, prism, semaphore, tileserver-gl, opentelemetry-auto-instrumentations-node, vitess, arangodb, redisinsight, nextcloud-server, wazuh-dashboard, saf, argo-workflows, kibana, opensearch-dashboards, kubeflow-katib, lerna, gemini-cli,...

GHSA-7R86-CG39-JMMJ vulnerabilities

Vulnerabilities for packages: langfuse, actions-runner, code-server, authentik-fips, prism, semaphore, serve, tileserver-gl, py3-jupyterlab, graalvm, npm, opentelemetry-auto-instrumentations-node, vitess, bash-language-server, jupyter-base-notebook, py3-captum, arangodb, eslint, pulumi, node-gyp,...

CVE-2026-27903 vulnerabilities

Vulnerabilities for packages: langfuse, actions-runner, code-server, authentik-fips, prism, semaphore, serve, tileserver-gl, py3-jupyterlab, graalvm, npm, opentelemetry-auto-instrumentations-node, vitess, bash-language-server, jupyter-base-notebook, py3-captum, arangodb, eslint, pulumi, node-gyp,...