NPM: Flowise RCE via TypeORM DataSource

NPM: Flowise RCE via TypeORM DataSource vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...

GHSA-4CWX-7WF7-3272 vulnerabilities

Vulnerabilities for packages: pelias-api, langfuse-fips, vitess, kibana, renovate, code-server, langfuse...

GHSA-8XCM-R25X-G524 vulnerabilities

Vulnerabilities for packages: prism, pelias-api, langfuse-fips, vitess, kibana, pulumi, renovate, code-server, actions-runner, npm, langfuse...

CVE-2026-13697 vulnerabilities

Vulnerabilities for packages: pelias-api, langfuse-fips, vitess, kibana, renovate, code-server, langfuse...

CVE-2026-16729 vulnerabilities

Vulnerabilities for packages: prism, pelias-api, langfuse-fips, vitess, kibana, pulumi, renovate, code-server, actions-runner, npm, langfuse...

CVE-2026-16728 vulnerabilities

Vulnerabilities for packages: prism, pelias-api, langfuse-fips, vitess, kibana, pulumi, renovate, code-server, actions-runner, npm, langfuse...

GHSA-V3R7-H72X-CJCM vulnerabilities

Vulnerabilities for packages: prism, pelias-api, langfuse-fips, vitess, kibana, pulumi, renovate, code-server, actions-runner, npm, langfuse...

CVE-2026-15157 vulnerabilities

Vulnerabilities for packages: prism, pelias-api, langfuse-fips, vitess, kibana, pulumi, renovate, code-server, actions-runner, npm, langfuse...

GHSA-M8RV-5G2X-5CG5 vulnerabilities

Vulnerabilities for packages: prism, pelias-api, langfuse-fips, vitess, kibana, pulumi, renovate, code-server, actions-runner, npm, langfuse...

GHSA-CQ5V-8Q36-5273 vulnerabilities

Vulnerabilities for packages: py3.13-scanner-test-libraries-aiohttp, puppygraph-python, kserve, apache-beam-python-3.11-sdk, datahub-ingestion-fips, airflow-core, vllm-cuda-13.2, apache-beam-python-3.12-sdk, lmcache-cuda-12.8, text-generation-inference, open-webui, kserve-models-web-app,...

GHSA-8359-H9FX-J6V9 vulnerabilities

Vulnerabilities for packages: label-studio...

GHSA-386Q-5HP3-95M9 vulnerabilities

Vulnerabilities for packages: label-studio...

CVE-2026-55389 vulnerabilities

Vulnerabilities for packages: label-studio...

CVE-2026-67353 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

GHSA-3FVR-2JW6-CRQ4 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

ROOT-APP-MAVEN-CVE-2024-29857 CVE-2024-29857 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched CVE-2024-29857 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

MAL-2026-11848 Malicious code in @servicetitan/culture (npm)

npm/@servicetitan/culture is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...

MAL-2026-11665 Malicious code in @or-sdk/account-settings (npm)

npm/@or-sdk/account-settings is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @onereach/step-components (npm)

npm/@onereach/step-components is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @or-sdk/views (npm)

npm/@or-sdk/views is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by th...