GHSA-4CWX-7WF7-3272 vulnerabilities

Vulnerabilities for packages: langfuse-fips, code-server, vitess, kibana, pelias-api, renovate, langfuse...

CVE-2026-13697 vulnerabilities

Vulnerabilities for packages: langfuse-fips, code-server, vitess, kibana, pelias-api, renovate, langfuse...

CVE-2026-16728 vulnerabilities

Vulnerabilities for packages: langfuse-fips, npm, code-server, vitess, actions-runner, prism, kibana, pelias-api, pulumi, renovate, langfuse...

GHSA-8XCM-R25X-G524 vulnerabilities

Vulnerabilities for packages: langfuse-fips, npm, code-server, vitess, actions-runner, prism, kibana, pelias-api, pulumi, renovate, langfuse...

GHSA-M8RV-5G2X-5CG5 vulnerabilities

Vulnerabilities for packages: langfuse-fips, npm, code-server, vitess, actions-runner, prism, kibana, pelias-api, pulumi, renovate, langfuse...

CVE-2026-15157 vulnerabilities

Vulnerabilities for packages: langfuse-fips, npm, code-server, vitess, actions-runner, prism, kibana, pelias-api, pulumi, renovate, langfuse...

GHSA-V3R7-H72X-CJCM vulnerabilities

Vulnerabilities for packages: langfuse-fips, npm, code-server, vitess, actions-runner, prism, kibana, pelias-api, pulumi, renovate, langfuse...

GHSA-CQ5V-8Q36-5273 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, py3-vllm-cuda-12.4, dask-kubernetes, vllm-cuda-13.2, airflow-core, kserve, apache-beam-python-3.12-sdk, py3-cassandra-medusa, lmcache-cuda-12.8, apache-beam-python-3.13-sdk, awx, text-generation-inference, kserve-models-web-app,...

GHSA-8359-H9FX-J6V9 vulnerabilities

Vulnerabilities for packages: label-studio...

GHSA-386Q-5HP3-95M9 vulnerabilities

Vulnerabilities for packages: label-studio...

CVE-2026-55389 vulnerabilities

Vulnerabilities for packages: label-studio...

CVE-2026-67353 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

GHSA-3FVR-2JW6-CRQ4 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

ROOT-APP-MAVEN-CVE-2024-29857 CVE-2024-29857 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched CVE-2024-29857 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

MAL-2026-11848 Malicious code in @servicetitan/culture (npm)

npm/@servicetitan/culture is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...

MAL-2026-11665 Malicious code in @or-sdk/account-settings (npm)

npm/@or-sdk/account-settings is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @onereach/step-components (npm)

npm/@onereach/step-components is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @or-sdk/views (npm)

npm/@or-sdk/views is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by th...

MAL-2026-11649 Malicious code in @onereach/si-validated-timestring-input (npm)

npm/@onereach/si-validated-timestring-input is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...

Malicious code in @onereach/si-validated-timestring-input (npm)

npm/@onereach/si-validated-timestring-input is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...