Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
ROOT-APP-NPM-CVE-2026-39363 Vulnerability in @rootio/vite (ROOT-APP-NPM-CVE-2026-39363)
vulnerability in @rootio/vite (ROOT-APP-NPM-CVE-2026-39363). Confidential information can be exposed externally. Mitigation: upgrade to `6.4.1-root.io.1, 6.4.1-root.io.2` or later.
ROOT-APP-NPM-CVE-2024-37890 Vulnerability in @rootio/ws (ROOT-APP-NPM-CVE-2024-37890)
vulnerability in @rootio/ws (ROOT-APP-NPM-CVE-2024-37890). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.4.6-root.io.1, 7.3.1-root.io.1, 7.3.1-root.io.2, 7.4.6-root.io.2` or later.
ROOT-APP-NPM-CVE-2023-26115 Vulnerability in @rootio/word-wrap (ROOT-APP-NPM-CVE-2023-26115)
vulnerability in @rootio/word-wrap (ROOT-APP-NPM-CVE-2023-26115). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.3-root.io.1, 1.2.3-root.io.2` or later.
ROOT-APP-NPM-CVE-2024-29180 Vulnerability in @rootio/webpack-dev-middleware (ROOT-APP-NPM-CVE-2024-29180)
vulnerability in @rootio/webpack-dev-middleware (ROOT-APP-NPM-CVE-2024-29180). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.0-root.io.1, 3.7.3-root.io.1, 4.3.0-root.io.2, 3.7.3-root.io.2` or later.
ROOT-APP-NPM-CVE-2025-48387 Vulnerability in @rootio/tar-fs (ROOT-APP-NPM-CVE-2025-48387)
vulnerability in @rootio/tar-fs (ROOT-APP-NPM-CVE-2025-48387). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.8-root.io.1, 3.0.6-root.io.1, 2.0.0-root.io.2, 2.0.0-root.io.3, 3.0.6-root.io.2, 3.0.8-root.io.2, 2.0.0-root.io.4` or later.
ROOT-APP-NPM-CVE-2025-59343 Vulnerability in @rootio/tar-fs (ROOT-APP-NPM-CVE-2025-59343)
vulnerability in @rootio/tar-fs (ROOT-APP-NPM-CVE-2025-59343). Data can be tampered with by attackers. Mitigation: upgrade to `3.1.0-root.io.1, 3.0.8-root.io.1, 3.0.6-root.io.1, 3.0.9-root.io.1, 2.0.0-root.io.3, 3.1.0-root.io.2, 3.0.8-root.io.2, 3.0.9-root.io.2, 2.0.0-root.io.4` or later.
ROOT-APP-NPM-CVE-2024-12905 Vulnerability in @rootio/tar-fs (ROOT-APP-NPM-CVE-2024-12905)
vulnerability in @rootio/tar-fs (ROOT-APP-NPM-CVE-2024-12905). Data can be tampered with by attackers. Mitigation: upgrade to `3.0.6-root.io.1, 2.0.0-root.io.1, 2.0.0-root.io.2, 2.0.0-root.io.3, 3.0.6-root.io.2, 2.0.0-root.io.4` or later.
ROOT-APP-NPM-CVE-2020-7753 Vulnerability in @rootio/trim (ROOT-APP-NPM-CVE-2020-7753)
vulnerability in @rootio/trim (ROOT-APP-NPM-CVE-2020-7753). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.0.1-root.io.1, 0.0.1-root.io.2` or later.
ROOT-APP-NPM-CVE-2025-30208 Vulnerability in @rootio/vite (ROOT-APP-NPM-CVE-2025-30208)
vulnerability in @rootio/vite (ROOT-APP-NPM-CVE-2025-30208). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.9.18-root.io.1, 2.9.18-root.io.2, 2.9.18-root.io.3` or later.
ROOT-APP-NPM-CVE-2021-33623 Vulnerability in @rootio/trim-newlines (ROOT-APP-NPM-CVE-2021-33623)
vulnerability in @rootio/trim-newlines (ROOT-APP-NPM-CVE-2021-33623). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.0-root.io.1, 1.0.0-root.io.2` or later.
ROOT-APP-NPM-CVE-2023-37466 Vulnerability in @rootio/vm2 (ROOT-APP-NPM-CVE-2023-37466)
vulnerability in @rootio/vm2 (ROOT-APP-NPM-CVE-2023-37466). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.9.17-root.io.3, 3.9.17-root.io.4` or later.
ROOT-APP-NPM-CVE-2023-32313 Vulnerability in @rootio/vm2 (ROOT-APP-NPM-CVE-2023-32313)
vulnerability in @rootio/vm2 (ROOT-APP-NPM-CVE-2023-32313). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.9.17-root.io.2, 3.9.17-root.io.3, 3.9.17-root.io.4` or later.
ROOT-APP-NPM-CVE-2023-32314 Vulnerability in @rootio/vm2 (ROOT-APP-NPM-CVE-2023-32314)
vulnerability in @rootio/vm2 (ROOT-APP-NPM-CVE-2023-32314). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.9.17-root.io.1, 3.9.17-root.io.2, 3.9.17-root.io.3, 3.9.17-root.io.4` or later.
ROOT-APP-NPM-CVE-2026-31988 Vulnerability in @rootio/yauzl (ROOT-APP-NPM-CVE-2026-31988)
vulnerability in @rootio/yauzl (ROOT-APP-NPM-CVE-2026-31988). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.0-root.io.1, 3.2.0-root.io.2, 3.2.0-root.io.3` or later.
ROOT-APP-NPM-CVE-2021-23358 Vulnerability in @rootio/underscore (ROOT-APP-NPM-CVE-2021-23358)
vulnerability in @rootio/underscore (ROOT-APP-NPM-CVE-2021-23358). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0-root.io.1, 1.8.3-root.io.1, 1.8.3-root.io.2, 1.7.0-root.io.2` or later.
USN-8388-1 Vulnerability in linux-aws-5.15 (USN-8388-1)
vulnerability in linux-aws-5.15 (USN-8388-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.0-1109.116~20.04.1` or later.
ROOT-APP-NPM-CVE-2026-44705 Vulnerability in @rootio/tmp (ROOT-APP-NPM-CVE-2026-44705)
vulnerability in @rootio/tmp (ROOT-APP-NPM-CVE-2026-44705). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.2.5-root.io.1, 0.0.33-root.io.3, 0.2.5-root.io.2, 0.0.33-root.io.4, 0.2.5-root.io.3` or later.
ROOT-APP-NPM-CVE-2025-29927 Vulnerability in @rootio/next (ROOT-APP-NPM-CVE-2025-29927)
vulnerability in @rootio/next (ROOT-APP-NPM-CVE-2025-29927). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.3.4-root.io.1, 12.3.4-root.io.2` or later.
CVE-2026-47708 Command Injection in stata-mcp (CVE-2026-47708)
command injection in stata-mcp (CVE-2026-47708). Risk of unauthorized operations or information disclosure. Exploitable via ``log_file_name``. Mitigation: upgrade to `1.17.3` or later.
ROOT-APP-NPM-CVE-2025-59288 Vulnerability in @rootio/playwright-core (ROOT-APP-NPM-CVE-2025-59288)
vulnerability in @rootio/playwright-core (ROOT-APP-NPM-CVE-2025-59288). Confidential information can be exposed externally. Mitigation: upgrade to `1.49.0-root.io.1, 1.49.0-root.io.2` or later.
ROOT-APP-NPM-CVE-2024-38355 Vulnerability in @rootio/socket.io (ROOT-APP-NPM-CVE-2024-38355)
vulnerability in @rootio/socket.io (ROOT-APP-NPM-CVE-2024-38355). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.2-root.io.1, 3.1.2-root.io.2` or later.
ROOT-APP-NPM-CVE-2026-29074 Vulnerability in @rootio/svgo (ROOT-APP-NPM-CVE-2026-29074)
vulnerability in @rootio/svgo (ROOT-APP-NPM-CVE-2026-29074). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.8.0-root.io.1, 2.8.0-root.io.2` or later.
ROOT-APP-NPM-CVE-2021-26540 Vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-CVE-2021-26540)
vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-CVE-2021-26540). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.2-root.io.3, 1.4.2-root.io.4, 1.4.2-root.io.5, 1.4.2-root.io.6, 1.4.2-root.io.7, 1.4.2-root.io.8, 1.4.2-root.io.9` or later.
ROOT-APP-NPM-NSWG-ECO-154 Vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-NSWG-ECO-154)
vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-NSWG-ECO-154). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.2-root.io.2, 1.4.2-root.io.3, 1.4.2-root.io.4, 1.4.2-root.io.5, 1.4.2-root.io.6, 1.4.2-root.io.7, 1.4.2-root.io.8, 1.4.2-root.io.9` or later.
ROOT-APP-NPM-CVE-2021-26539 Vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-CVE-2021-26539)
vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-CVE-2021-26539). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.2-root.io.7, 1.4.2-root.io.8, 1.4.2-root.io.9` or later.
ROOT-APP-NPM-CVE-2019-25225 Vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-CVE-2019-25225)
vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-CVE-2019-25225). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.2-root.io.6, 1.4.2-root.io.7, 1.4.2-root.io.8, 1.4.2-root.io.9` or later.
ROOT-APP-NPM-CVE-2017-16016 Vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-CVE-2017-16016)
vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-CVE-2017-16016). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.2-root.io.5, 1.4.2-root.io.6, 1.4.2-root.io.7, 1.4.2-root.io.8, 1.4.2-root.io.9` or later.
ROOT-APP-NPM-CVE-2024-21501 Vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-CVE-2024-21501)
vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-CVE-2024-21501). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.2-root.io.8, 1.4.2-root.io.9` or later.
ROOT-APP-NPM-CVE-2022-25887 Vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-CVE-2022-25887)
vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-CVE-2022-25887). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.2-root.io.1, 1.4.2-root.io.2, 1.4.2-root.io.3, 1.4.2-root.io.4, 1.4.2-root.io.5, 1.4.2-root.io.6, 1.4.2-root.io.7, 1.4.2-root.io.8, 1.4.2-root.io.9` or later.
ROOT-APP-NPM-CVE-2016-1000237 Vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-CVE-2016-1000237)
vulnerability in @rootio/sanitize-html (ROOT-APP-NPM-CVE-2016-1000237). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.2-root.io.4, 1.4.2-root.io.5, 1.4.2-root.io.6, 1.4.2-root.io.7, 1.4.2-root.io.8, 1.4.2-root.io.9` or later.
ROOT-APP-NPM-CVE-2022-24999 Vulnerability in @rootio/qs (ROOT-APP-NPM-CVE-2022-24999)
vulnerability in @rootio/qs (ROOT-APP-NPM-CVE-2022-24999). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.5.2-root.io.1, 6.5.2-root.io.2` or later.
ROOT-APP-NPM-CVE-2023-32695 Vulnerability in @rootio/socket.io-parser (ROOT-APP-NPM-CVE-2023-32695)
vulnerability in @rootio/socket.io-parser (ROOT-APP-NPM-CVE-2023-32695). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.5-root.io.1, 4.0.5-root.io.2` or later.
ROOT-APP-NPM-CVE-2024-53382 Vulnerability in @rootio/prismjs (ROOT-APP-NPM-CVE-2024-53382)
vulnerability in @rootio/prismjs (ROOT-APP-NPM-CVE-2024-53382). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.27.0-root.io.2, 1.27.0-root.io.1` or later.
ROOT-APP-NPM-CVE-2026-0000 Vulnerability in @rootio/react-leaflet-heatmap-layer (ROOT-APP-NPM-CVE-2026-0000)
vulnerability in @rootio/react-leaflet-heatmap-layer (ROOT-APP-NPM-CVE-2026-0000). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.0-root.io.2, 2.0.0-root.io.1` or later.
ROOT-APP-NPM-CVE-2024-45296 Vulnerability in @rootio/path-to-regexp (ROOT-APP-NPM-CVE-2024-45296)
vulnerability in @rootio/path-to-regexp (ROOT-APP-NPM-CVE-2024-45296). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0-root.io.1, 0.1.7-root.io.1, 0.1.7-root.io.2, 1.8.0-root.io.2, 0.1.7-root.io.3, 3.2.0-root.io.1, 3.2.0-root.io.2` or later.
ROOT-APP-NPM-CVE-2026-34043 Vulnerability in @rootio/serialize-javascript (ROOT-APP-NPM-CVE-2026-34043)
vulnerability in @rootio/serialize-javascript (ROOT-APP-NPM-CVE-2026-34043). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.0.2-root.io.3, 6.0.2-root.io.2` or later.
ROOT-APP-NPM-CVE-2026-33672 Vulnerability in @rootio/picomatch (ROOT-APP-NPM-CVE-2026-33672)
vulnerability in @rootio/picomatch (ROOT-APP-NPM-CVE-2026-33672). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.2-root.io.3, 4.0.3-root.io.2, 2.3.0-root.io.3, 2.3.1-root.io.2, 4.0.3-root.io.1, 2.3.0-root.io.2, 4.0.2-root.io.2, 3.0.1-root.io.1, 3.0.1-root.io.2, 4.0.1-root.io.2, 3.0.1-root.io.3, 4.0.1-root.io.3, 2.3.1-root.io.3, 2.2.3-root.io.1` or later.
ROOT-APP-NPM-CVE-2026-33671 Vulnerability in @rootio/picomatch (ROOT-APP-NPM-CVE-2026-33671)
vulnerability in @rootio/picomatch (ROOT-APP-NPM-CVE-2026-33671). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.2-root.io.3, 4.0.3-root.io.2, 2.3.0-root.io.3, 2.3.0-root.io.1, 2.3.1-root.io.1, 4.0.2-root.io.1, 2.3.1-root.io.2, 4.0.3-root.io.1, 2.3.0-root.io.2, 4.0.2-root.io.2, 4.0.1-root.io.1, 3.0.1-root.io.2, 4.0.1-root.io.2, 3.0.1-root.io.3, 4.0.1-root.io.3, 2.3.1-root.io.3, 2.2.3-root.io.1` or later.
ROOT-APP-NPM-CVE-2023-44270 Vulnerability in @rootio/postcss (ROOT-APP-NPM-CVE-2023-44270)
vulnerability in @rootio/postcss (ROOT-APP-NPM-CVE-2023-44270). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.39-root.io.2, 7.0.39-root.io.1` or later.
ROOT-APP-NPM-CVE-2024-52798 Vulnerability in @rootio/path-to-regexp (ROOT-APP-NPM-CVE-2024-52798)
vulnerability in @rootio/path-to-regexp (ROOT-APP-NPM-CVE-2024-52798). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.1.7-root.io.2, 0.1.7-root.io.3` or later.
ROOT-APP-NPM-CVE-2025-47934 Vulnerability in @rootio/openpgp (ROOT-APP-NPM-CVE-2025-47934)
vulnerability in @rootio/openpgp (ROOT-APP-NPM-CVE-2025-47934). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.10.1-root.io.1, 5.10.1-root.io.2` or later.
ROOT-APP-NPM-CVE-2022-31129 Vulnerability in @rootio/moment (ROOT-APP-NPM-CVE-2022-31129)
vulnerability in @rootio/moment (ROOT-APP-NPM-CVE-2022-31129). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.24.0-root.io.1, 2.27.0-root.io.1, 2.24.0-root.io.2, 2.24.0-root.io.3, 2.27.0-root.io.2` or later.
ROOT-APP-NPM-CVE-2022-24785 Vulnerability in @rootio/moment (ROOT-APP-NPM-CVE-2022-24785)
vulnerability in @rootio/moment (ROOT-APP-NPM-CVE-2022-24785). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.27.0-root.io.1, 2.24.0-root.io.2, 2.0.0-root.io.2, 2.0.0-root.io.3, 2.0.0-root.io.4, 2.24.0-root.io.3, 2.27.0-root.io.2` or later.
ROOT-APP-NPM-CVE-2025-66030 Vulnerability in @rootio/node-forge (ROOT-APP-NPM-CVE-2025-66030)
vulnerability in @rootio/node-forge (ROOT-APP-NPM-CVE-2025-66030). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.1-root.io.2, 1.3.1-root.io.3, 1.3.1-root.io.4, 1.3.1-root.io.5` or later.
ROOT-APP-NPM-GHSA-vvjj-xcjg-gr5g Vulnerability in @rootio/nodemailer (ROOT-APP-NPM-GHSA-vvjj-xcjg-gr5g)
vulnerability in @rootio/nodemailer (ROOT-APP-NPM-GHSA-vvjj-xcjg-gr5g). Data can be tampered with by attackers. Mitigation: upgrade to `7.0.9-root.io.3, 7.0.9-root.io.2, 6.9.15-root.io.3, 7.0.11-root.io.1, 6.9.15-root.io.4` or later.
ROOT-APP-NPM-CVE-2024-21512 Vulnerability in @rootio/mysql2 (ROOT-APP-NPM-CVE-2024-21512)
vulnerability in @rootio/mysql2 (ROOT-APP-NPM-CVE-2024-21512). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.3-root.io.2, 3.9.7-root.io.1, 3.9.7-root.io.2, 2.3.3-root.io.3` or later.
ROOT-APP-NPM-CVE-2021-3803 Vulnerability in @rootio/nth-check (ROOT-APP-NPM-CVE-2021-3803)
vulnerability in @rootio/nth-check (ROOT-APP-NPM-CVE-2021-3803). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.2-root.io.1, 1.0.2-root.io.2, 2.0.0-root.io.1` or later.
ROOT-APP-NPM-CVE-2022-0235 Vulnerability in @rootio/node-fetch (ROOT-APP-NPM-CVE-2022-0235)
vulnerability in @rootio/node-fetch (ROOT-APP-NPM-CVE-2022-0235). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.1-root.io.1, 2.6.1-root.io.2` or later.
ROOT-APP-NPM-CVE-2024-21508 Vulnerability in @rootio/mysql2 (ROOT-APP-NPM-CVE-2024-21508)
vulnerability in @rootio/mysql2 (ROOT-APP-NPM-CVE-2024-21508). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.3-root.io.2, 2.3.3-root.io.1, 2.3.3-root.io.3` or later.
ROOT-APP-NPM-CVE-2024-21511 Vulnerability in @rootio/mysql2 (ROOT-APP-NPM-CVE-2024-21511)
vulnerability in @rootio/mysql2 (ROOT-APP-NPM-CVE-2024-21511). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.3-root.io.2, 2.3.3-root.io.1, 2.3.3-root.io.3` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →