Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
ECHO-2dd4-1209-8fa6
  • Echo:npm/next-auth
See record for full details 2 days ago
  • Fix available
CLEANSTART-2026-UY65626
  • CleanStart/langfuse-worker
Security fix for ghsa-7rqj-j65f-68wh applied in: langfuse-worker 3.194.1-r1, langfuse-worker 3.212.0-r1, langfuse-worker 3.213.0-r1, langfuse-worker 3.214.0-r1, langfuse-worker 3.215.0-r1, langfuse-worker 3.216.0-r1, langfuse-worker 3.217.0-r1, langfuse-worker 3.218.0-r1, langfuse-worker 3.219.0-r1, langfuse-worker 3.220.0-r1, langfuse-worker 3.221.1-r2, langfuse-worker 3.223.0-r2, langfuse-worker 3.224.0-r1 18 Sep
  • Fix available
CGA-47c7-x9pj-85cg
  • Chainguard/langfuse-3-compat
  • Wolfi/langfuse-3-compat
See record for full details 15 Sep
  • Fix available
  • Severity - 9.1 (Critical)
CVE-2026-73420
  • github.com/nextauthjs/next-auth
NextAuth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass 13 Aug
  • Fix available
  • Severity - 9.1 (Critical)
MINI-p7xj-prjj-q33p
  • MinimOS/langfuse-3
  • MinimOS/langfuse-3-worker
See record for full details 26 Jul
  • Fix available
MINI-hqcv-vx43-gc7f
  • MinimOS/cal.diy-6.1
See record for full details 26 Jul
  • No fix available
MINI-9rhj-8fjf-x394
  • MinimOS/cal.diy-6.2
See record for full details 26 Jul
  • No fix available
CGA-7m4v-4cv6-x7r8
  • Chainguard/langfuse-fips-3-worker
See record for full details 24 Jul
  • Fix available
  • Severity - 9.1 (Critical)
CGA-ghpm-j6pp-c99c
  • Chainguard/langfuse-fips-3-worker
See record for full details 24 Jul
  • Fix available
  • Severity - 9.1 (Critical)
CGA-q2gx-fc7f-pcmf
  • Chainguard/langfuse-fips-3
See record for full details 24 Jul
  • Fix available
  • Severity - 9.1 (Critical)
CGA-pgwx-fp3w-f4g9
  • Chainguard/jitsucom-jitsu-console
  • Wolfi/jitsucom-jitsu-console
See record for full details 24 Jul
  • Fix available
  • Severity - 9.1 (Critical)
CGA-h3f9-vhgp-xqpv
  • Chainguard/langfuse-fips-3-worker
See record for full details 24 Jul
  • Fix available
  • Severity - 9.1 (Critical)
CGA-wcx4-m3wp-cc8c
  • Chainguard/langfuse-fips-3-worker
See record for full details 24 Jul
  • Fix available
  • Severity - 9.1 (Critical)
CGA-q7rx-6j3m-mc2j
  • Chainguard/langfuse-fips-3
See record for full details 24 Jul
  • Fix available
  • Severity - 9.1 (Critical)
CGA-63gw-x4xm-3pfg
  • Chainguard/langfuse-3-worker
  • Wolfi/langfuse-3-worker
See record for full details 24 Jul
  • Fix available
  • Severity - 9.1 (Critical)
CGA-c9hw-v7m3-hch2
  • Chainguard/langfuse-3-worker
  • Wolfi/langfuse-3-worker
See record for full details 24 Jul
  • Fix available
  • Severity - 9.1 (Critical)