CVE-2025-53632

CVE-2025-53632 This repository contains an exploit of CVE-2025-53632 affecting Chall-Manager !WARNING The way Chall-Manager deals with scenarios, it is still completly exploitable without the zip slip: simply tamper the pulumi binary from the scenario such that the next execution runs your...

CVE-2026-101916 vulnerabilities

Vulnerabilities for packages: langfuse, pulumi...

GHSA-M9GG-HP2V-232J vulnerabilities

Vulnerabilities for packages: langfuse, pulumi...

GHSA-F596-WHHP-79R4 vulnerabilities

Vulnerabilities for packages: langfuse, pulumi...

CVE-2026-101915 vulnerabilities

Vulnerabilities for packages: langfuse, pulumi...

GHSA-RPW4-54J3-4H4Q vulnerabilities

Vulnerabilities for packages: librechat, sqlpad, homepage, wazuh-dashboard, wazuh-dashboard-fips, pulumi, unleash-fips, actions-runner, langfuse, opensearch-dashboards, prism, lerna, commercial-gitlab-rails-ee-fips, graalvm, code-server, commercial-gitlab-rails-ee, renovate, npm, langfuse-fips,...

CVE-2026-101913 vulnerabilities

Vulnerabilities for packages: librechat, sqlpad, homepage, wazuh-dashboard, wazuh-dashboard-fips, pulumi, unleash-fips, actions-runner, langfuse, opensearch-dashboards, prism, lerna, commercial-gitlab-rails-ee-fips, graalvm, code-server, commercial-gitlab-rails-ee, renovate, npm, langfuse-fips,...

CVE-2026-101910 vulnerabilities

Vulnerabilities for packages: librechat, sqlpad, homepage, wazuh-dashboard, wazuh-dashboard-fips, pulumi, unleash-fips, actions-runner, langfuse, opensearch-dashboards, prism, lerna, commercial-gitlab-rails-ee-fips, graalvm, code-server, commercial-gitlab-rails-ee, renovate, npm, langfuse-fips,...

GHSA-2VR4-CQ9G-PVRC vulnerabilities

Vulnerabilities for packages: librechat, sqlpad, homepage, wazuh-dashboard, wazuh-dashboard-fips, pulumi, unleash-fips, actions-runner, langfuse, opensearch-dashboards, prism, lerna, commercial-gitlab-rails-ee-fips, graalvm, code-server, commercial-gitlab-rails-ee, renovate, npm, langfuse-fips,...

CVE-2026-101913 vulnerabilities

Vulnerabilities for packages: renovate, lerna, npm, prism, pulumi, opensearch-dashboards, code-server, sqlpad...

CVE-2026-101910 vulnerabilities

Vulnerabilities for packages: renovate, lerna, npm, prism, pulumi, opensearch-dashboards, code-server, sqlpad...

GHSA-2VR4-CQ9G-PVRC vulnerabilities

Vulnerabilities for packages: renovate, lerna, npm, prism, pulumi, opensearch-dashboards, code-server, sqlpad...

GHSA-RPW4-54J3-4H4Q vulnerabilities

Vulnerabilities for packages: renovate, lerna, npm, prism, pulumi, opensearch-dashboards, code-server, sqlpad...

CVE-2026-85024 vulnerabilities

Vulnerabilities for packages: actions-runner, vitess, commercial-gitlab-rails-ee-fips, homepage, kibana, pulumi, code-server, prism, renovate, commercial-gitlab-rails-ee, npm, lerna...

GHSA-3WWX-PV8P-Q78V vulnerabilities

Vulnerabilities for packages: actions-runner, vitess, commercial-gitlab-rails-ee-fips, homepage, kibana, pulumi, code-server, prism, renovate, commercial-gitlab-rails-ee, npm, lerna...

GHSA-3WWX-PV8P-Q78V vulnerabilities

Vulnerabilities for packages: renovate, lerna, vitess, pulumi, prism, code-server...

CVE-2026-85024 vulnerabilities

Vulnerabilities for packages: renovate, lerna, vitess, pulumi, prism, code-server...

CLEANSTART-2026-WX98104 Security fix for CVE-2026-42338 applied in: opensearch-dashboards-fips 2.19.5-r0, proxy-agent 6.5.0-r0, pulumi 3.248.0-r0, renovate 43.123.8-r3, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1, sqlpad 7.5.7-r3

CVE-2026-42338 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IM94459 Security fix for CVE-2026-9358 applied in: npm 11.14.0-r3, pulumi 3.248.0-r0

CVE-2026-9358 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GE92046 Security fix for CVE-2026-45149 applied in: npm 11.14.0-r0, pulumi 3.248.0-r0, renovate 44.31.0-r1, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-45149 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...