Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| ROOT-APP-MAVEN-CVE-2018-5968 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2018-5968)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2018-5968). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.1, 2.5.2-root.io.2, 2.9.2-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2020-36180 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2020-36180)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2020-36180). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.1, 2.5.2-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2019-20330 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2019-20330)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2019-20330). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2018-11307 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2018-11307)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2018-11307). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.1, 2.5.2-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2020-36183 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2020-36183)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2020-36183). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2019-17267 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2019-17267)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2019-17267). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2020-36181 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2020-36181)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2020-36181). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2020-36189 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2020-36189)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2020-36189). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2020-9548 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2020-9548)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2020-9548). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.1, 2.5.2-root.io.2, 2.9.2-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2019-17531 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2019-17531)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2019-17531). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2021-20190 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2021-20190)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2021-20190). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2020-36185 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2020-36185)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2020-36185). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2020-10650 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2020-10650)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2020-10650). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.1, 2.5.2-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2018-7489 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2018-7489)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2018-7489). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2018-14718 |
|
Vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2018-14718)
vulnerability in io.root.com.fasterxml.jackson.core:jackson-databind (ROOT-APP-MAVEN-CVE-2018-14718). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.2-root.io.2` or later.
|
| ECHO-9147-54ce-f6c9 |
|
ECHO-9147-54ce-f6c9 |
| ROOT-APP-NUGET-CVE-2026-33116 |
|
Vulnerability in Rootio.System.Security.Cryptography.Xml (ROOT-APP-NUGET-CVE-2026-33116)
vulnerability in Rootio.System.Security.Cryptography.Xml (ROOT-APP-NUGET-CVE-2026-33116). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0.120071` or later.
|
| ROOT-APP-NUGET-CVE-2026-26171 |
|
Vulnerability in Rootio.System.Security.Cryptography.Xml (ROOT-APP-NUGET-CVE-2026-26171)
vulnerability in Rootio.System.Security.Cryptography.Xml (ROOT-APP-NUGET-CVE-2026-26171). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0.120071` or later.
|
| ECHO-4a9d-de37-ca7b |
|
ECHO-4a9d-de37-ca7b |
| ECHO-25b1-13a6-458a |
|
ECHO-25b1-13a6-458a |
| ECHO-5a20-e6ba-3130 |
|
ECHO-5a20-e6ba-3130 |
| ECHO-6c6d-4591-3a1a |
|
ECHO-6c6d-4591-3a1a |
| ECHO-4fbf-41ee-9475 |
|
ECHO-4fbf-41ee-9475 |
| ECHO-f52e-9e52-aaa7 |
|
ECHO-f52e-9e52-aaa7 |
| ECHO-7dad-a83a-cd30 |
|
ECHO-7dad-a83a-cd30 |
| ECHO-20fa-1923-cbd4 |
|
ECHO-20fa-1923-cbd4 |
| ECHO-dcbf-e23f-d8f8 |
|
ECHO-dcbf-e23f-d8f8 |
| ROOT-APP-PYPI-CVE-2023-49083 |
|
Vulnerability in rootio-cryptography (ROOT-APP-PYPI-CVE-2023-49083)
vulnerability in rootio-cryptography (ROOT-APP-PYPI-CVE-2023-49083). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `36.0.1+root.io.1` or later.
|
| CVE-2026-50645 |
|
Vulnerability in org.apache.cxf:cxf-core (CVE-2026-50645)
vulnerability in org.apache.cxf:cxf-core (CVE-2026-50645). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.12` or later.
|
| CVE-2026-50634 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (CVE-2026-50634)
vulnerability in org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (CVE-2026-50634). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50633 |
|
Vulnerability in org.apache.cxf:cxf-integration-jca (CVE-2026-50633)
vulnerability in org.apache.cxf:cxf-integration-jca (CVE-2026-50633). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50632 |
|
Vulnerability in org.apache.cxf:cxf-rt-transports-jms (CVE-2026-50632)
vulnerability in org.apache.cxf:cxf-rt-transports-jms (CVE-2026-50632). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50631 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50631)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50631). Confidential information can be exposed externally. Mitigation: upgrade to `4.1.7` or later.
|
| DEBIAN-CVE-2026-48914 |
|
Vulnerability in qemu (DEBIAN-CVE-2026-48914)
vulnerability in qemu (DEBIAN-CVE-2026-48914). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50630 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50630)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50630). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50629 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50629)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50629). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50628 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50628)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50628). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50627 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50627)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50627). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50623 |
|
Authentication Bypass in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50623)
authentication bypass in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50623). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-49875 |
|
XXE (XML External Entity) in apache (CVE-2026-49875)
vulnerability in apache (CVE-2026-49875). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48914 |
|
Vulnerability in c (CVE-2026-48914)
vulnerability in c (CVE-2026-48914). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11847 |
|
Path Traversal in path-traversal (CVE-2026-11847)
path traversal in path-traversal (CVE-2026-11847). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11846 |
|
Path Traversal in CVE-2026-11846 (CVE-2026-11846)
path traversal in CVE-2026-11846 (CVE-2026-11846). Data can be tampered with by attackers.
|
| CVE-2026-11845 |
|
OS Command Injection in CVE-2026-11845 (CVE-2026-11845)
OS command injection in CVE-2026-11845 (CVE-2026-11845). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11844 |
|
Path Traversal in CVE-2026-11844 (CVE-2026-11844)
path traversal in CVE-2026-11844 (CVE-2026-11844). Confidential information can be exposed externally.
|
| ROOT-OS-DEBIAN-12-CVE-2023-48161 |
|
Vulnerability in rootio-giflib (ROOT-OS-DEBIAN-12-CVE-2023-48161)
vulnerability in rootio-giflib (ROOT-OS-DEBIAN-12-CVE-2023-48161). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.2.1-2.5.root.io.4, 5.2.1-2.5.root.io.5, 5.2.1-2.5.root.io.7, 5.2.1-2.5.root.io.3, 5.2.1-2.5.root.io.6` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2025-31344 |
|
Vulnerability in rootio-giflib (ROOT-OS-DEBIAN-12-CVE-2025-31344)
vulnerability in rootio-giflib (ROOT-OS-DEBIAN-12-CVE-2025-31344). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.2.1-2.5.root.io.4, 5.2.1-2.5.root.io.5, 5.2.1-2.5.root.io.1, 5.2.1-2.5.root.io.7, 5.2.1-2.5.root.io.3, 5.2.1-2.5.root.io.6` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2026-23868 |
|
Vulnerability in rootio-giflib (ROOT-OS-DEBIAN-12-CVE-2026-23868)
vulnerability in rootio-giflib (ROOT-OS-DEBIAN-12-CVE-2026-23868). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.2.1-2.5.root.io.7` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2021-40633 |
|
Vulnerability in rootio-giflib (ROOT-OS-DEBIAN-12-CVE-2021-40633)
vulnerability in rootio-giflib (ROOT-OS-DEBIAN-12-CVE-2021-40633). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.2.1-2.5.root.io.4, 5.2.1-2.5.root.io.5, 5.2.1-2.5.root.io.7, 5.2.1-2.5.root.io.6` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2026-26740 |
|
Vulnerability in rootio-giflib (ROOT-OS-DEBIAN-12-CVE-2026-26740)
vulnerability in rootio-giflib (ROOT-OS-DEBIAN-12-CVE-2026-26740). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.2.1-2.5.root.io.7` or later.
|