Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-p63j-vcc4-9vmv
  • npm/@vitest/browser
 @vitest/browser: Browser Mode provider commands bypass the file-access permission gate 21 Jul
  • Fix available
  • Severity - 9.4 (Critical)
CLEANSTART-2026-UN72189
  • CleanStart/langfuse-worker
 Security fix for ghsa-p63j-vcc4-9vmv applied in: langfuse-worker 3.194.1-r1, langfuse-worker 3.212.0-r1, langfuse-worker 3.213.0-r1, langfuse-worker 3.214.0-r1, langfuse-worker 3.215.0-r1, langfuse-worker 3.216.0-r1, langfuse-worker 3.217.0-r1, langfuse-worker 3.218.0-r1, langfuse-worker 3.219.0-r1, langfuse-worker 3.220.0-r1, langfuse-worker 3.221.1-r2, langfuse-worker 3.223.0-r2, langfuse-worker 3.224.0-r1 5 days ago
  • Fix available
CGA-3v7g-rxh4-72rm
  • Chainguard/langfuse-3-compat
  • Wolfi/langfuse-3-compat
 See record for full details 15 Sep
  • Fix available
  • Severity - 9.4 (Critical)
CVE-2026-73653
  • github.com/vitest-dev/vitest
 Vitest: Browser Mode provider commands bypass the file-access permission gate 13 Aug
  • Fix available
  • Severity - 9.4 (Critical)
CGA-6fhc-mwq5-pmh5
  • Chainguard/langfuse-fips-3-worker
 See record for full details 22 Jul
  • Fix available
  • Severity - 9.4 (Critical)
CGA-mw9g-wxjq-5f2x
  • Chainguard/langfuse-3-worker
  • Wolfi/langfuse-3-worker
 See record for full details 22 Jul
  • Fix available
  • Severity - 9.4 (Critical)
CGA-jm5w-whfv-9859
  • Chainguard/langfuse-fips-3-worker
 See record for full details 22 Jul
  • Fix available
  • Severity - 9.4 (Critical)
MINI-p294-9m57-wv2p
  • MinimOS/langfuse-3-worker
 See record for full details 22 Jul
  • Fix available
MINI-qh6g-jpp9-r5qx
  • MinimOS/openclaw
 See record for full details 22 Jul
  • Fix available
CGA-68xc-qrwq-5qc4
  • Chainguard/langfuse-3-worker
  • Wolfi/langfuse-3-worker
 See record for full details 22 Jul
  • Fix available
  • Severity - 9.4 (Critical)