vulnerability in @demica/resources (MAL-2026-5350). Risk of unauthorized operations or information disclosure. Exploitable via ``scripts.postinstall``.
vulnerability in io.root.commons-io:commons-io (ROOT-APP-MAVEN-CVE-2021-29425). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6-root.io.1, 2.5-root.io.1, 2.5-root.io.2, 2.6-root.io.2` or later.
vulnerability in io.root.commons-io:commons-io (ROOT-APP-MAVEN-CVE-2024-47554). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6-root.io.1, 2.5-root.io.1, 2.11.0-root.io.1, 2.5-root.io.2, 2.11.0-root.io.2, 2.6-root.io.2` or later.
vulnerability in io.root.org.apache.velocity:velocity-tools (ROOT-APP-MAVEN-CVE-2020-13959). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0-root.io.1` or later.