CVE-2026-25896 vulnerabilities

Vulnerabilities for packages: tileserver-gl, prism, saf, renovate...

GHSA-M7JM-9GC2-MPF2 vulnerabilities

Vulnerabilities for packages: langfuse-fips, dbgate-fips, langfuse, prism, kibana, renovate, tileserver-gl-fips, saf, dbgate, tileserver-gl...

CVE-2026-25896 vulnerabilities

Vulnerabilities for packages: langfuse-fips, dbgate-fips, langfuse, prism, kibana, renovate, tileserver-gl-fips, saf, dbgate, tileserver-gl...

GHSA-W7FW-MJWX-W883 vulnerabilities

Vulnerabilities for packages: tileserver-gl, kubeflow-pipelines, kubeflow-centraldashboard, kubeflow-katib, langfuse, py3-jupyterlab, sqlpad, json-server, code-server, thingsboard, argo-workflows, saf, opensearch-dashboards...

CVE-2026-2391 vulnerabilities

Vulnerabilities for packages: tileserver-gl, kubeflow-pipelines, kubeflow-centraldashboard, kubeflow-katib, langfuse, py3-jupyterlab, sqlpad, json-server, code-server, thingsboard, argo-workflows, saf, opensearch-dashboards...

CVE-2026-24842 vulnerabilities

Vulnerabilities for packages: tileserver-gl, lerna, prism, kubeflow-pipelines, kubeflow-centraldashboard, kubeflow-katib, py3-jupyterlab, sqlpad, node-gyp, renovate, code-server, vitess, saf, pnpm-stage0, pulumi, opensearch-dashboards, npm...

GHSA-34X7-HFP2-RC4V vulnerabilities

Vulnerabilities for packages: tileserver-gl, lerna, prism, kubeflow-pipelines, kubeflow-centraldashboard, kubeflow-katib, py3-jupyterlab, sqlpad, node-gyp, renovate, code-server, vitess, saf, pnpm-stage0, pulumi, opensearch-dashboards, npm...

CVE-2026-24842 vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, sqlpad, kubeflow-katib, kubeflow-pipelines, pulumi, tensorflow-cpu-jupyter, graalvm, prism, kibana, renovate, gitlab-rails-ce-fips, opensearch-dashboards, redisinsight, actions-runner, gitlab-rails-ce, tileserver-gl, code-server, node-gyp,...

GHSA-34X7-HFP2-RC4V vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, sqlpad, kubeflow-katib, kubeflow-pipelines, pulumi, tensorflow-cpu-jupyter, graalvm, prism, kibana, renovate, gitlab-rails-ce-fips, opensearch-dashboards, redisinsight, actions-runner, gitlab-rails-ce, tileserver-gl, code-server, node-gyp,...

GHSA-PJ86-CFQH-VQX6 vulnerabilities

Vulnerabilities for packages: tileserver-gl, sqlpad, json-server, thingsboard, saf, argo-workflows...

CVE-2024-51999 vulnerabilities

Vulnerabilities for packages: tileserver-gl, sqlpad, json-server, thingsboard, saf, argo-workflows...

CVE-2024-51999 vulnerabilities

Vulnerabilities for packages: librechat, argo-workflows, json-server, sqlpad, redisinsight, saf, thingsboard, tileserver-gl...

GHSA-PJ86-CFQH-VQX6 vulnerabilities

Vulnerabilities for packages: librechat, argo-workflows, json-server, sqlpad, redisinsight, saf, thingsboard, tileserver-gl...

VulnCheck KEV: CVE-2025-44136

MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting XSS. The GET parameter "layer" is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to execute arbitrary HTML or JavaScript code on a victim's browser...

VulnCheck KEV: CVE-2025-44137

MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creating the path to a file allows the insertion of "../" and thus read any file on the web...

EUVD-2025-23022

Malicious code in bioql PyPI...

EUVD-2025-23023

Malicious code in bioql PyPI...

EUVD-2024-33155

Malicious code in bioql PyPI...

EUVD-2024-35388

Malicious code in bioql PyPI...

CVE-2025-44136

MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting XSS. The GET parameter "layer" is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to execute arbitrary HTML or JavaScript code on a victim's browser...