Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
GHSA-fv97-hqvh-jxcm Vulnerability in hello244a (GHSA-fv97-hqvh-jxcm)
vulnerability in hello244a (GHSA-fv97-hqvh-jxcm). Risk of unauthorized operations or information disclosure.
MAL-2026-5188 Vulnerability in hello244a (MAL-2026-5188)
vulnerability in hello244a (MAL-2026-5188). Risk of unauthorized operations or information disclosure.
ROOT-APP-NPM-CVE-2026-4867 Vulnerability in @rootio/path-to-regexp (ROOT-APP-NPM-CVE-2026-4867)
vulnerability in @rootio/path-to-regexp (ROOT-APP-NPM-CVE-2026-4867). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.1.12-root.io.1, 0.1.12-root.io.2` or later.
ROOT-APP-NPM-CVE-2025-7338 Vulnerability in @rootio/multer (ROOT-APP-NPM-CVE-2025-7338)
vulnerability in @rootio/multer (ROOT-APP-NPM-CVE-2025-7338). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.5-lts.2-root.io.2, 1.4.5-lts.2-root.io.3, 1.4.5-lts.2-root.io.4, 1.4.5-lts.2-root.io.5` or later.
ROOT-APP-NPM-CVE-2025-48997 Vulnerability in @rootio/multer (ROOT-APP-NPM-CVE-2025-48997)
vulnerability in @rootio/multer (ROOT-APP-NPM-CVE-2025-48997). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.5-lts.2-root.io.4, 1.4.5-lts.2-root.io.5` or later.
ROOT-APP-NPM-CVE-2017-18214 Vulnerability in @rootio/moment (ROOT-APP-NPM-CVE-2017-18214)
vulnerability in @rootio/moment (ROOT-APP-NPM-CVE-2017-18214). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.0-root.io.2, 2.0.0-root.io.1, 2.0.0-root.io.3, 2.0.0-root.io.4` or later.
ROOT-APP-NPM-CVE-2016-4055 Vulnerability in @rootio/moment (ROOT-APP-NPM-CVE-2016-4055)
vulnerability in @rootio/moment (ROOT-APP-NPM-CVE-2016-4055). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.0-root.io.3, 2.0.0-root.io.4` or later.
ROOT-APP-NPM-CVE-2024-55565 Vulnerability in @rootio/nanoid (ROOT-APP-NPM-CVE-2024-55565)
vulnerability in @rootio/nanoid (ROOT-APP-NPM-CVE-2024-55565). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.6-root.io.1, 3.3.6-root.io.2` or later.
ROOT-APP-NPM-CVE-2021-44906 Vulnerability in @rootio/minimist (ROOT-APP-NPM-CVE-2021-44906)
vulnerability in @rootio/minimist (ROOT-APP-NPM-CVE-2021-44906). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.2.5-root.io.1, 1.2.5-root.io.2, 1.1.3-root.io.1` or later.
ROOT-APP-NPM-CVE-2023-22467 Vulnerability in @rootio/validator (ROOT-APP-NPM-CVE-2023-22467)
vulnerability in @rootio/validator (ROOT-APP-NPM-CVE-2023-22467). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.2.0-root.io.1` or later.
ROOT-APP-NPM-CVE-2026-2327 Vulnerability in @rootio/markdown-it (ROOT-APP-NPM-CVE-2026-2327)
vulnerability in @rootio/markdown-it (ROOT-APP-NPM-CVE-2026-2327). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.1.0-root.io.1, 14.1.0-root.io.2` or later.
ROOT-APP-NPM-CVE-2025-66414 Vulnerability in @rootio/modelcontextprotocol__sdk (ROOT-APP-NPM-CVE-2025-66414)
vulnerability in @rootio/modelcontextprotocol__sdk (ROOT-APP-NPM-CVE-2025-66414). Confidential information can be exposed externally. Mitigation: upgrade to `1.7.0-root.io.1, 1.7.0-root.io.4, 1.20.1-root.io.1, 1.20.1-root.io.2, 1.7.0-root.io.2, 1.7.0-root.io.3` or later.
ROOT-APP-NPM-CVE-2024-4067 Vulnerability in @rootio/micromatch (ROOT-APP-NPM-CVE-2024-4067)
vulnerability in @rootio/micromatch (ROOT-APP-NPM-CVE-2024-4067). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.10-root.io.1, 3.1.10-root.io.2` or later.
CVE-2026-5589 Out-of-Bounds Write in c (CVE-2026-5589)
out-of-bounds write in c (CVE-2026-5589). Risk of unauthorized operations or information disclosure.
CVE-2026-41522 Vulnerability in flask (CVE-2026-41522)
vulnerability in flask (CVE-2026-41522). Risk of unauthorized operations or information disclosure. Exploitable via ``case.iocs``. Mitigation: upgrade to `2.4.28` or later.
CVE-2026-41518 Cross-Site Scripting (XSS) in CVE-2026-41518 (CVE-2026-41518)
cross-site scripting in CVE-2026-41518 (CVE-2026-41518). Confidential information can be exposed externally. Exploitable via ``ChartDatasetConfig.legend``.
ECHO-a119-605d-66fd ECHO-a119-605d-66fd
CGA-6566-5rwp-796c CGA-6566-5rwp-796c
CGA-478j-mw6r-5jrc CGA-478j-mw6r-5jrc
CGA-rg38-66v2-5cch CGA-rg38-66v2-5cch
CGA-9grc-mq3j-6597 CGA-9grc-mq3j-6597
CGA-953x-f75g-qqv7 CGA-953x-f75g-qqv7
CGA-6j2m-f8mx-m4h2 CGA-6j2m-f8mx-m4h2
CGA-c892-7prg-2874 CGA-c892-7prg-2874
ROOT-APP-NPM-CVE-2016-20018 Vulnerability in @rootio/knex (ROOT-APP-NPM-CVE-2016-20018)
vulnerability in @rootio/knex (ROOT-APP-NPM-CVE-2016-20018). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.20.15-root.io.1, 0.20.15-root.io.2` or later.
ROOT-APP-NPM-CVE-2025-13465 Vulnerability in @rootio/lodash (ROOT-APP-NPM-CVE-2025-13465)
vulnerability in @rootio/lodash (ROOT-APP-NPM-CVE-2025-13465). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.17.21-root.io.2, 4.17.21-root.io.1` or later.
ROOT-APP-NPM-CVE-2026-29045 Vulnerability in @rootio/hono (ROOT-APP-NPM-CVE-2026-29045)
vulnerability in @rootio/hono (ROOT-APP-NPM-CVE-2026-29045). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.11.7-root.io.1, 4.11.7-root.io.2, 4.11.7-root.io.3, 4.11.7-root.io.4, 4.11.7-root.io.5, 4.11.7-root.io.6` or later.
ROOT-APP-NPM-CVE-2026-29085 Vulnerability in @rootio/hono (ROOT-APP-NPM-CVE-2026-29085)
vulnerability in @rootio/hono (ROOT-APP-NPM-CVE-2026-29085). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.11.7-root.io.1, 4.11.7-root.io.2, 4.11.7-root.io.3, 4.11.7-root.io.4, 4.11.7-root.io.5, 4.11.7-root.io.6` or later.
ROOT-APP-NPM-CVE-2026-29086 Vulnerability in @rootio/hono (ROOT-APP-NPM-CVE-2026-29086)
vulnerability in @rootio/hono (ROOT-APP-NPM-CVE-2026-29086). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.11.7-root.io.1, 4.11.7-root.io.2, 4.11.7-root.io.3, 4.11.7-root.io.4, 4.11.7-root.io.5, 4.11.7-root.io.6` or later.
ROOT-APP-NPM-CVE-2026-33916 Vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33916)
vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33916). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.7.8-root.io.3, 4.7.8-root.io.4, 4.7.8-root.io.5, 4.7.8-root.io.6, 4.7.7-root.io.3` or later.
ROOT-APP-NPM-GHSA-7rx3-28cr-v5wh Vulnerability in @rootio/handlebars (ROOT-APP-NPM-GHSA-7rx3-28cr-v5wh)
vulnerability in @rootio/handlebars (ROOT-APP-NPM-GHSA-7rx3-28cr-v5wh). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.7.8-root.io.5, 4.7.8-root.io.6, 4.7.7-root.io.3` or later.
CVE-2026-47703 Vulnerability in github.com/AdguardTeam/AdGuardHome (CVE-2026-47703)
vulnerability in github.com/AdguardTeam/AdGuardHome (CVE-2026-47703). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.107.75` or later.
ROOT-APP-NPM-CVE-2022-33987 Vulnerability in @rootio/got (ROOT-APP-NPM-CVE-2022-33987)
vulnerability in @rootio/got (ROOT-APP-NPM-CVE-2022-33987). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.3.2-root.io.1, 8.3.2-root.io.2, 6.7.1-root.io.1, 7.1.0-root.io.1` or later.
ROOT-APP-NPM-CVE-2025-64718 Vulnerability in @rootio/js-yaml (ROOT-APP-NPM-CVE-2025-64718)
vulnerability in @rootio/js-yaml (ROOT-APP-NPM-CVE-2025-64718). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.13.1-root.io.1, 3.14.1-root.io.1, 4.1.0-root.io.1, 3.14.1-root.io.2, 4.1.0-root.io.2, 3.13.1-root.io.2` or later.
ROOT-APP-NPM-CVE-2025-7783 Vulnerability in @rootio/form-data (ROOT-APP-NPM-CVE-2025-7783)
vulnerability in @rootio/form-data (ROOT-APP-NPM-CVE-2025-7783). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.1-root.io.1, 4.0.0-root.io.1, 2.3.3-root.io.1, 4.0.2-root.io.1, 4.0.1-root.io.1, 4.0.2-root.io.2, 2.3.3-root.io.2, 4.0.0-root.io.2, 3.0.1-root.io.2, 4.0.1-root.io.2` or later.
ROOT-APP-NPM-CVE-2025-50537 Vulnerability in @rootio/eslint (ROOT-APP-NPM-CVE-2025-50537)
vulnerability in @rootio/eslint (ROOT-APP-NPM-CVE-2025-50537). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.32.0-root.io.1, 9.16.0-root.io.1, 9.16.0-root.io.2, 7.32.0-root.io.2, 9.16.0-root.io.3` or later.
ROOT-APP-NPM-CVE-2019-10744 Vulnerability in @rootio/lodash (ROOT-APP-NPM-CVE-2019-10744)
vulnerability in @rootio/lodash (ROOT-APP-NPM-CVE-2019-10744). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.2-root.io.2, 2.4.2-root.io.1, 2.4.2-root.io.3, 0.1.0-root.io.1, 0.1.0-root.io.2, 2.4.2-root.io.4, 0.1.0-root.io.3` or later.
ROOT-APP-NPM-CVE-2018-16487 Vulnerability in @rootio/lodash (ROOT-APP-NPM-CVE-2018-16487)
vulnerability in @rootio/lodash (ROOT-APP-NPM-CVE-2018-16487). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.2-root.io.2, 2.4.2-root.io.3, 2.4.2-root.io.4` or later.
ROOT-APP-NPM-CVE-2015-9235 Vulnerability in @rootio/jsonwebtoken (ROOT-APP-NPM-CVE-2015-9235)
vulnerability in @rootio/jsonwebtoken (ROOT-APP-NPM-CVE-2015-9235). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.1.0-root.io.1, 0.4.0-root.io.1, 0.1.0-root.io.2, 0.4.0-root.io.2, 0.1.0-root.io.3, 0.4.0-root.io.3` or later.
ROOT-APP-NPM-CVE-2025-65945 Vulnerability in @rootio/jws (ROOT-APP-NPM-CVE-2025-65945)
vulnerability in @rootio/jws (ROOT-APP-NPM-CVE-2025-65945). Data can be tampered with by attackers. Mitigation: upgrade to `3.2.2-root.io.1, 4.0.0-root.io.1, 0.2.6-root.io.2, 3.2.2-root.io.2, 0.2.6-root.io.3, 4.0.0-root.io.2` or later.
ROOT-APP-NPM-NSWG-ECO-17 Vulnerability in @rootio/jsonwebtoken (ROOT-APP-NPM-NSWG-ECO-17)
vulnerability in @rootio/jsonwebtoken (ROOT-APP-NPM-NSWG-ECO-17). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.1.0-root.io.2, 0.4.0-root.io.2, 0.1.0-root.io.3, 0.4.0-root.io.3` or later.
ROOT-APP-NPM-CVE-2016-1000223 Vulnerability in @rootio/jws (ROOT-APP-NPM-CVE-2016-1000223)
vulnerability in @rootio/jws (ROOT-APP-NPM-CVE-2016-1000223). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.2.6-root.io.1, 0.2.6-root.io.2, 0.2.6-root.io.3` or later.
ROOT-APP-NPM-CVE-2025-64756 Vulnerability in @rootio/glob (ROOT-APP-NPM-CVE-2025-64756)
vulnerability in @rootio/glob (ROOT-APP-NPM-CVE-2025-64756). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.4.2-root.io.1, 11.0.3-root.io.1, 10.3.10-root.io.1, 11.0.0-root.io.1, 10.4.5-root.io.1, 10.3.12-root.io.1, 11.0.0-root.io.2, 10.3.12-root.io.2, 10.3.10-root.io.2, 11.0.3-root.io.2, 10.4.5-root.io.2, 10.4.2-root.io.2` or later.
ROOT-APP-NPM-CVE-2025-46653 Vulnerability in @rootio/formidable (ROOT-APP-NPM-CVE-2025-46653)
vulnerability in @rootio/formidable (ROOT-APP-NPM-CVE-2025-46653). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.2-root.io.1, 2.1.2-root.io.2` or later.
ROOT-APP-NPM-CVE-2020-8203 Vulnerability in @rootio/lodash.pick (ROOT-APP-NPM-CVE-2020-8203)
vulnerability in @rootio/lodash.pick (ROOT-APP-NPM-CVE-2020-8203). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.0-root.io.1, 4.4.0-root.io.2` or later.
ROOT-APP-NPM-CVE-2024-29415 Vulnerability in @rootio/ip (ROOT-APP-NPM-CVE-2024-29415)
vulnerability in @rootio/ip (ROOT-APP-NPM-CVE-2024-29415). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.1.9-root.io.1, 2.0.0-root.io.1, 2.0.1-root.io.1, 2.0.0-root.io.2, 1.1.9-root.io.2, 2.0.1-root.io.2, 2.0.0-root.io.3, 1.1.5-root.io.1` or later.
ROOT-APP-NPM-CVE-2025-9910 Vulnerability in @rootio/jsondiffpatch (ROOT-APP-NPM-CVE-2025-9910)
vulnerability in @rootio/jsondiffpatch (ROOT-APP-NPM-CVE-2025-9910). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.6.0-root.io.1, 0.6.0-root.io.2` or later.
ROOT-APP-NPM-CVE-2023-42282 Vulnerability in @rootio/ip (ROOT-APP-NPM-CVE-2023-42282)
vulnerability in @rootio/ip (ROOT-APP-NPM-CVE-2023-42282). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.0-root.io.2, 2.0.0-root.io.3` or later.
ROOT-APP-NPM-CVE-2026-32141 Vulnerability in @rootio/flatted (ROOT-APP-NPM-CVE-2026-32141)
vulnerability in @rootio/flatted (ROOT-APP-NPM-CVE-2026-32141). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.3-root.io.1, 3.3.1-root.io.1, 3.3.2-root.io.1, 3.3.2-root.io.2, 3.3.1-root.io.2, 3.3.3-root.io.2, 3.3.2-root.io.3, 2.0.2-root.io.1, 3.3.1-root.io.3, 3.3.3-root.io.3, 2.0.2-root.io.2, 3.3.2-root.io.4` or later.
ROOT-APP-NPM-CVE-2026-24001 Vulnerability in @rootio/diff (ROOT-APP-NPM-CVE-2026-24001)
vulnerability in @rootio/diff (ROOT-APP-NPM-CVE-2026-24001). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.2-root.io.1, 7.0.0-root.io.1, 8.0.2-root.io.1, 5.2.0-root.io.1, 5.1.0-root.io.1, 7.0.0-root.io.2, 5.2.0-root.io.2, 4.0.2-root.io.2, 5.1.0-root.io.2, 8.0.2-root.io.2, 3.5.0-root.io.1` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →