GHSA-45RX-2JWX-CXFR vulnerabilities

Vulnerabilities for packages: kibana, langfuse-fips, librechat, cadence-web, langfuse, gemini-cli...

GHSA-P63J-VCC4-9VMV vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-XGM2-5F3F-MVVC vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-C2J3-45GR-MQC4 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, nextcloud-server, langfuse...

CVE-2026-64645 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

GHSA-4633-3J49-MH5Q vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

CVE-2026-64644 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

GHSA-4C39-4CCG-62R3 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

CVE-2026-64642 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-M99W-X7HQ-7VFJ vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

GHSA-Q8WF-6R8G-63CH vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

GHSA-P9J2-GV94-2WF4 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

GHSA-955P-X3MX-JCVP vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

GHSA-W62V-XXXG-MG59 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, keycloak, thingsboard, neo4j, apicurio-registry, zipkin, apache-pulsar, management-api-for-apache-cassandra-5.0, tez, celeborn...

MAL-2026-11050 Malicious code in discordnv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f79139609558d677545faa7d5f1d30ec31a54abe9fba990117ec0d27ea3ba48 On import discordnv, init.py invokes mainentry which hides the console window, walks Discord/Chrome/Edge/Brave/Opera/Yandex/Firefox LevelDB/SQLite...

Malicious code in discordnv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f79139609558d677545faa7d5f1d30ec31a54abe9fba990117ec0d27ea3ba48 On import discordnv, init.py invokes mainentry which hides the console window, walks Discord/Chrome/Edge/Brave/Opera/Yandex/Firefox LevelDB/SQLite...

CVE-2026-57530

Milkdown before 7.21.3 contains a stored cross-site scripting vulnerability in the @milkdown/preset-commonmark and @milkdown/components packages that allows attackers with document write access to execute arbitrary JavaScript in the browser context of any user who opens the document or clicks a...

Malicious code in app-data-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc306d8463afd4c0baadf4af1627986a5cb136d516c71415957fa606150008bd Analysis of [email protected] 3 files scanned produced no static or traced findings. No lifecycle hooks fetching or executing remote content, no...

Malicious code in app-data-lts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9d67601ec8b46265e1f23f5e48ff5beb050626f4bc156b291cb1b8f8c36d35 package.json declares postinstall node test.js and main: index.js, but index.js is absent from the tarball. test.js executes require'.', which throws...