12307 matches found
CVE-2026-48122 Workspace settings can override executable and Gemfile paths used by the Ruby LSP VS Code extension
Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level settings in the Ruby LSP VS Code extension prior to version 0.10.4 could override the path to the Ruby executable, the version manager executables, or the Bundler Gemfile used at startup. A malicious...
CVE-2026-69110
OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can...
CVE-2026-69110
OpenCode Studio prior to version 2.4.4 is affected by an unauthenticated file-read vulnerability exposed via GET /api/tmp/:tmpFile and GET /api/music/:fileName, permitting reading of arbitrary files from temp and static/music directories and exposing intermediate artifacts (audio/video) and subti...
EUVD-2026-52743
OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can...
CVE-2026-69110 OpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/music
OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can...
CVE-2026-69110 OpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/music
OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can...
CVE-2026-54690 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-54691 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-55391 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-386Q-5HP3-95M9 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-5578-W22F-PFX9 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-954P-556P-R752 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-VX7X-VCC2-C44G vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-WJV6-JCFJ-MF9R vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-54654 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-55415 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-8359-H9FX-J6V9 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-54621 vulnerabilities
Vulnerabilities for packages: label-studio...