CVE-2026-13149 vulnerabilities

Vulnerabilities for packages: thingsboard, lerna, ts-patch, jupyter-base-notebook, prism, nextcloud-server, sqlpad, renovate, opensearch-dashboards, rancher-api-ui, pulumi, langfuse, saf, serve...

GHSA-3JXR-9VMJ-R5CP vulnerabilities

Vulnerabilities for packages: thingsboard, lerna, ts-patch, jupyter-base-notebook, prism, nextcloud-server, sqlpad, renovate, opensearch-dashboards, rancher-api-ui, pulumi, langfuse, saf, serve...

Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection via the commitCommand function. An attacker can create or overwrite arbitrary files by sending specially crafted requests through the SSH interface. Note: This vulnerability was fixed in version...

CVE-2019-5417

A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server...