Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
USN-8253-2 Vulnerability in postfix (USN-8253-2)
vulnerability in postfix (USN-8253-2). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.11.0-1ubuntu1.2+esm4` or later.
CGA-6h3p-9ffx-7xv2 CGA-6h3p-9ffx-7xv2
CVE-2026-50033 Vulnerability in privilege-escalation (CVE-2026-50033)
vulnerability in privilege-escalation (CVE-2026-50033). Successful exploitation can lead to full system takeover.
CVE-2026-44682 Vulnerability in privilege-escalation (CVE-2026-44682)
vulnerability in privilege-escalation (CVE-2026-44682). Successful exploitation can lead to full system takeover.
CVE-2026-44609 Vulnerability in privilege-escalation (CVE-2026-44609)
vulnerability in privilege-escalation (CVE-2026-44609). Successful exploitation can lead to full system takeover.
CVE-2026-43924 Open Redirect in CVE-2026-43924 (CVE-2026-43924)
vulnerability in CVE-2026-43924 (CVE-2026-43924). Risk of unauthorized operations or information disclosure. Exploitable via ``extension_meta``.
CVE-2026-42061 Vulnerability in privilege-escalation (CVE-2026-42061)
vulnerability in privilege-escalation (CVE-2026-42061). Successful exploitation can lead to full system takeover.
CVE-2026-40495 Information Disclosure in CVE-2026-40495 (CVE-2026-40495)
vulnerability in CVE-2026-40495 (CVE-2026-40495). Risk of unauthorized operations or information disclosure. Exploitable via ``hide_version_public``.
CVE-2026-37700 Cross-Site Scripting (XSS) in CVE-2026-37700 (CVE-2026-37700)
cross-site scripting in CVE-2026-37700 (CVE-2026-37700). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-26825 Vulnerability in r-cran-readxl (DEBIAN-CVE-2026-26825)
vulnerability in r-cran-readxl (DEBIAN-CVE-2026-26825). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-26824 Vulnerability in r-cran-readxl (DEBIAN-CVE-2026-26824)
vulnerability in r-cran-readxl (DEBIAN-CVE-2026-26824). Risk of unauthorized operations or information disclosure.
CVE-2026-26825 Vulnerability in libxls-project (CVE-2026-26825)
vulnerability in libxls-project (CVE-2026-26825). Risk of unauthorized operations or information disclosure.
CVE-2026-26824 Vulnerability in libxls-project (CVE-2026-26824)
vulnerability in libxls-project (CVE-2026-26824). Risk of unauthorized operations or information disclosure.
CVE-2026-10766 Vulnerability in mlrun (CVE-2026-10766)
vulnerability in mlrun (CVE-2026-10766). Risk of unauthorized operations or information disclosure.
CVE-2026-44017 Path Traversal in docling (CVE-2026-44017)
path traversal in docling (CVE-2026-44017). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.91.0` or later.
ROOT-APP-PYPI-CVE-2026-26331 Vulnerability in rootio-yt-dlp (ROOT-APP-PYPI-CVE-2026-26331)
vulnerability in rootio-yt-dlp (ROOT-APP-PYPI-CVE-2026-26331). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2025.10.22+root.io.1, 2025.10.22+root.io.2` or later.
CVE-2026-8889 Vulnerability in securly (CVE-2026-8889)
vulnerability in securly (CVE-2026-8889). Confidential information can be exposed externally.
CVE-2026-8888 Vulnerability in dos (CVE-2026-8888)
vulnerability in dos (CVE-2026-8888). Risk of unauthorized operations or information disclosure.
CVE-2026-8881 Vulnerability in securly (CVE-2026-8881)
vulnerability in securly (CVE-2026-8881). Confidential information can be exposed externally.
CVE-2026-8879 Vulnerability in securly (CVE-2026-8879)
vulnerability in securly (CVE-2026-8879). Risk of unauthorized operations or information disclosure.
CVE-2026-8878 Vulnerability in securly (CVE-2026-8878)
vulnerability in securly (CVE-2026-8878). Confidential information can be exposed externally.
CVE-2026-8876 Vulnerability in securly (CVE-2026-8876)
vulnerability in securly (CVE-2026-8876). Risk of unauthorized operations or information disclosure.
CVE-2026-8874 Vulnerability in c (CVE-2026-8874)
vulnerability in c (CVE-2026-8874). Data can be tampered with by attackers.
DEBIAN-CVE-2026-45614 Vulnerability in optee-os (DEBIAN-CVE-2026-45614)
vulnerability in optee-os (DEBIAN-CVE-2026-45614). Confidential information can be exposed externally.
DEBIAN-CVE-2026-45702 Vulnerability in optee-os (DEBIAN-CVE-2026-45702)
vulnerability in optee-os (DEBIAN-CVE-2026-45702). Risk of unauthorized operations or information disclosure.
CVE-2026-7888 Unsafe Deserialization in concrete5/concrete5 (CVE-2026-7888)
vulnerability in concrete5/concrete5 (CVE-2026-7888). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.2` or later.
CVE-2026-45702 Vulnerability in linaro (CVE-2026-45702)
vulnerability in linaro (CVE-2026-45702). Risk of unauthorized operations or information disclosure.
CVE-2026-45614 Vulnerability in linaro (CVE-2026-45614)
vulnerability in linaro (CVE-2026-45614). Confidential information can be exposed externally.
CVE-2026-42840 Cross-Site Scripting (XSS) in CVE-2026-42840 (CVE-2026-42840)
cross-site scripting in CVE-2026-42840 (CVE-2026-42840). Risk of unauthorized operations or information disclosure.
CVE-2026-42839 Cross-Site Scripting (XSS) in CVE-2026-42839 (CVE-2026-42839)
cross-site scripting in CVE-2026-42839 (CVE-2026-42839). Risk of unauthorized operations or information disclosure.
CVE-2026-26379 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-26379)
SSRF in ssrf (CVE-2026-26379). Risk of unauthorized operations or information disclosure.
CVE-2026-26378 Cross-Site Scripting (XSS) in koha (CVE-2026-26378)
cross-site scripting in koha (CVE-2026-26378). Risk of unauthorized operations or information disclosure.
ROOT-APP-PYPI-CVE-2026-0000 Vulnerability in rootio-litellm (ROOT-APP-PYPI-CVE-2026-0000)
vulnerability in rootio-litellm (ROOT-APP-PYPI-CVE-2026-0000). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.82.6+root.io.1, 1.82.6+root.io.2, 1.82.6+root.io.3` or later.
ROOT-APP-PYPI-CVE-2024-53899 Vulnerability in rootio-virtualenv (ROOT-APP-PYPI-CVE-2024-53899)
vulnerability in rootio-virtualenv (ROOT-APP-PYPI-CVE-2024-53899). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `20.15.1+root.io.1, 20.26.2+root.io.1, 20.26.2+root.io.2, 20.26.2+root.io.3, 20.15.1+root.io.2` or later.
ROOT-APP-PYPI-CVE-2025-71176 Vulnerability in rootio-pytest (ROOT-APP-PYPI-CVE-2025-71176)
vulnerability in rootio-pytest (ROOT-APP-PYPI-CVE-2025-71176). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.2+root.io.1, 8.4.2+root.io.1, 8.3.5+root.io.1, 8.4.2+root.io.2, 9.0.2+root.io.2, 8.3.5+root.io.2` or later.
ROOT-APP-PYPI-CVE-2023-46136 Vulnerability in rootio-Werkzeug (ROOT-APP-PYPI-CVE-2023-46136)
vulnerability in rootio-Werkzeug (ROOT-APP-PYPI-CVE-2023-46136). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.7+root.io.4, 2.3.7+root.io.5, 2.2.3+root.io.2, 2.3.7+root.io.6, 2.2.3+root.io.3` or later.
ROOT-APP-PYPI-CVE-2024-49767 Vulnerability in rootio-Werkzeug (ROOT-APP-PYPI-CVE-2024-49767)
vulnerability in rootio-Werkzeug (ROOT-APP-PYPI-CVE-2024-49767). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.7+root.io.3, 2.3.7+root.io.4, 2.3.7+root.io.5, 2.2.3+root.io.2, 2.3.7+root.io.6, 2.2.3+root.io.3` or later.
ROOT-APP-PYPI-CVE-2024-34069 Vulnerability in rootio-Werkzeug (ROOT-APP-PYPI-CVE-2024-34069)
vulnerability in rootio-Werkzeug (ROOT-APP-PYPI-CVE-2024-34069). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.2.3+root.io.2` or later.
ROOT-APP-PYPI-CVE-2026-22702 Vulnerability in rootio-virtualenv (ROOT-APP-PYPI-CVE-2026-22702)
vulnerability in rootio-virtualenv (ROOT-APP-PYPI-CVE-2026-22702). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `20.36.0+root.io.1, 20.36.0+root.io.2, 20.36.0+root.io.3, 20.36.0+root.io.4, 20.26.6+root.io.1` or later.
ROOT-APP-PYPI-CVE-2024-49766 Vulnerability in rootio-Werkzeug (ROOT-APP-PYPI-CVE-2024-49766)
vulnerability in rootio-Werkzeug (ROOT-APP-PYPI-CVE-2024-49766). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.7+root.io.2, 2.3.7+root.io.3, 2.3.7+root.io.4, 2.3.7+root.io.5, 2.3.7+root.io.6` or later.
ROOT-APP-PYPI-CVE-2023-25577 Vulnerability in rootio-Werkzeug (ROOT-APP-PYPI-CVE-2023-25577)
vulnerability in rootio-Werkzeug (ROOT-APP-PYPI-CVE-2023-25577). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.2+root.io.2, 2.1.2+root.io.3, 2.1.2+root.io.4` or later.
ROOT-APP-PYPI-CVE-2025-47273 Vulnerability in rootio-setuptools (ROOT-APP-PYPI-CVE-2025-47273)
vulnerability in rootio-setuptools (ROOT-APP-PYPI-CVE-2025-47273). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `66.1.1+root.io.1, 65.5.1+root.io.1, 73.0.1+root.io.1, 69.0.2+root.io.1, 78.1.0+root.io.1, 75.8.0+root.io.1, 69.1.1+root.io.1, 75.3.0+root.io.1, 66.1.1+root.io.2, 72.1.0+root.io.1, 74.0.0+root.io.1, 69.5.1+root.io.2, 58.1.0+root.io.1, 75.1.0+root.io.1, 63.2.0+root.io.1, 57.5.0+root.io.3, 58.1.0+root.io.3, 65.5.0+root.io.1, 65.5.0+root.io.2, 65.5.0+root.io.3, 75.6.0+root.io.1, 57.0.0+root.io.1, 65.5.1+root.io.2, 66.1.1+root.io.3, 69.1.1+root.io.2, 74.0.0+root.io.2, 72.1.0+root.io.2, 65.5.0+root.io.4, 75.3.0+root.io.2, 69.5.1+root.io.3, 63.2.0+root.io.2, 73.0.1+root.io.2, 75.6.0+root.io.2, 75.8.0+root.io.2, 75.1.0+root.io.2, 68.0.0+root.io.1` or later.
ROOT-APP-PYPI-CVE-2024-5569 Vulnerability in rootio-zipp (ROOT-APP-PYPI-CVE-2024-5569)
vulnerability in rootio-zipp (ROOT-APP-PYPI-CVE-2024-5569). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17.0+root.io.1, 3.17.0+root.io.2, 3.15.0+root.io.1` or later.
ROOT-APP-PYPI-CVE-2022-40897 Vulnerability in rootio-setuptools (ROOT-APP-PYPI-CVE-2022-40897)
vulnerability in rootio-setuptools (ROOT-APP-PYPI-CVE-2022-40897). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `57.5.0+root.io.1, 58.1.0+root.io.1, 57.5.0+root.io.2, 63.2.0+root.io.1, 57.5.0+root.io.3, 58.1.0+root.io.3, 65.5.0+root.io.3, 57.0.0+root.io.1, 65.5.0+root.io.4, 63.2.0+root.io.2` or later.
ROOT-APP-PYPI-CVE-2024-6345 Vulnerability in rootio-setuptools (ROOT-APP-PYPI-CVE-2024-6345)
vulnerability in rootio-setuptools (ROOT-APP-PYPI-CVE-2024-6345). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `65.5.1+root.io.1, 69.0.2+root.io.1, 69.1.1+root.io.1, 69.5.1+root.io.1, 66.1.1+root.io.2, 57.5.0+root.io.1, 69.5.1+root.io.2, 58.1.0+root.io.1, 57.5.0+root.io.2, 63.2.0+root.io.1, 57.5.0+root.io.3, 58.1.0+root.io.3, 65.5.0+root.io.2, 65.5.0+root.io.3, 57.0.0+root.io.1, 65.5.1+root.io.2, 66.1.1+root.io.3, 69.1.1+root.io.2, 65.5.0+root.io.4, 69.5.1+root.io.3, 63.2.0+root.io.2, 68.0.0+root.io.1` or later.
ROOT-APP-PYPI-CVE-2024-52804 Vulnerability in rootio-tornado (ROOT-APP-PYPI-CVE-2024-52804)
vulnerability in rootio-tornado (ROOT-APP-PYPI-CVE-2024-52804). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.2+root.io.1, 6.4.1+root.io.1, 6.3.3+root.io.1, 6.3.3+root.io.2, 6.4.1+root.io.2, 6.4.1+root.io.3, 6.2+root.io.2, 6.3.3+root.io.3` or later.
ROOT-APP-PYPI-CVE-2025-47287 Vulnerability in rootio-tornado (ROOT-APP-PYPI-CVE-2025-47287)
vulnerability in rootio-tornado (ROOT-APP-PYPI-CVE-2025-47287). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.2+root.io.1, 6.4.1+root.io.1, 6.3.3+root.io.2, 6.4.1+root.io.2, 6.4.1+root.io.3, 6.2+root.io.2, 6.3.3+root.io.3` or later.
ROOT-APP-PYPI-CVE-2026-32875 Vulnerability in rootio-ujson (ROOT-APP-PYPI-CVE-2026-32875)
vulnerability in rootio-ujson (ROOT-APP-PYPI-CVE-2026-32875). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.10.0+root.io.2, 5.10.0+root.io.3, 5.10.0+root.io.4, 5.8.0+root.io.3, 5.10.0+root.io.5, 5.8.0+root.io.4` or later.
ROOT-APP-PYPI-CVE-2026-32874 Vulnerability in rootio-ujson (ROOT-APP-PYPI-CVE-2026-32874)
vulnerability in rootio-ujson (ROOT-APP-PYPI-CVE-2026-32874). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.11.0+root.io.1, 5.10.0+root.io.1, 5.8.0+root.io.1, 5.10.0+root.io.2, 5.8.0+root.io.2, 5.10.0+root.io.3, 5.10.0+root.io.4, 5.8.0+root.io.3, 5.10.0+root.io.5, 5.11.0+root.io.2, 5.8.0+root.io.4` or later.
ROOT-APP-PYPI-CVE-2025-24793 Vulnerability in rootio-snowflake-connector-python (ROOT-APP-PYPI-CVE-2025-24793)
vulnerability in rootio-snowflake-connector-python (ROOT-APP-PYPI-CVE-2025-24793). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.12.3+root.io.1, 3.12.3+root.io.2` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →