CVE-2026-9678 vulnerabilities

Vulnerabilities for packages: renovate, code-server, vitess, langfuse...