CVE-2026-4867 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, sqlpad, json-server, kubeflow-centraldashboard, argo-workflows...

@1771technologies/play-frame (>=0.0.2 <=0.0.19), @9188/doso (>=1.0.0 <=1.0.10) +2136 more potentially affected by CVE-2024-45296 +1 more via path-to-regexp (>=0.0.2 <=0.1.12)

path-to-regexp NPM version =0.0.2, =0.0.2, =1.0.0, =1.0.44, =1.16.33, =1.16.33, =25.4.0-alpha.0, =16.7.2, =1.0.1, =2.4.3, =1.11.282, =1.1.55, =0.1.4, =0.1.12-beta.3 and more Source cves: CVE-2024-45296, CVE-2026-4867 Source advisory: SNYK:JS-PATHTOREGEXP-15789761...

CVE-2026-4867

creationtimestamp| type| source ---|---|--- 2026-03-26 16:03:27+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mhxy56xqkc27 2026-03-26 22:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhym5fbmva2x 2026-04-17 03:37:07+00:00| seen|...