Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| ROOT-APP-NPM-CVE-2025-9288 |
|
Vulnerability in @rootio/sha.js (ROOT-APP-NPM-CVE-2025-9288)
vulnerability in @rootio/sha.js (ROOT-APP-NPM-CVE-2025-9288). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.11-root.io.1, 2.4.11-root.io.2` or later.
|
| ROOT-APP-NPM-CVE-2026-46625 |
|
Vulnerability in @rootio/js-cookie (ROOT-APP-NPM-CVE-2026-46625)
vulnerability in @rootio/js-cookie (ROOT-APP-NPM-CVE-2026-46625). Data can be tampered with by attackers. Mitigation: upgrade to `2.2.1-root.io.1, 3.0.5-root.io.1, 3.0.5-root.io.2, 2.2.1-root.io.2` or later.
|
| ROOT-OS-UBUNTU-2204-CVE-2026-27456 |
|
Vulnerability in rootio-util-linux (ROOT-OS-UBUNTU-2204-CVE-2026-27456)
vulnerability in rootio-util-linux (ROOT-OS-UBUNTU-2204-CVE-2026-27456). Confidential information can be exposed externally. Mitigation: upgrade to `2.37.2-4ubuntu3.5.root.io.1` or later.
|
| openSUSE-SU-2026:20897-1 |
|
Vulnerability in openSUSE-SU-2026:20897-1 (openSUSE-SU-2026:20897-1)
vulnerability in openSUSE-SU-2026:20897-1 (openSUSE-SU-2026:20897-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:22025-1 |
|
Vulnerability in python-pyOpenSSL (SUSE-SU-2026:22025-1)
vulnerability in python-pyOpenSSL (SUSE-SU-2026:22025-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `25.0.0-160000.4.1` or later.
|
| USN-8344-3 |
|
Vulnerability in python-pip (USN-8344-3)
vulnerability in python-pip (USN-8344-3). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `22.0.2+dfsg-1ubuntu0.7+esm3` or later.
|
| CVE-2026-4035 |
|
Vulnerability in mlflow (CVE-2026-4035)
vulnerability in mlflow (CVE-2026-4035). Confidential information can be exposed externally. Exploitable via ``api_key``. Mitigation: upgrade to `3.11.0` or later.
|
| CVE-2025-15654 |
|
Cross-Site Scripting (XSS) in CVE-2025-15654 (CVE-2025-15654)
cross-site scripting in CVE-2025-15654 (CVE-2025-15654). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-NPM-CVE-2026-42041 |
|
Vulnerability in @rootio/axios (ROOT-APP-NPM-CVE-2026-42041)
vulnerability in @rootio/axios (ROOT-APP-NPM-CVE-2026-42041). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.13.5-root.io.5, 1.12.0-root.io.7, 1.13.2-root.io.6, 1.15.0-root.io.5, 1.13.6-root.io.3, 1.13.5-root.io.6, 1.12.0-root.io.8, 1.13.5-root.io.7, 1.13.2-root.io.7, 1.13.5-root.io.8, 1.12.1-root.io.18, 1.13.5-root.io.9, 1.15.0-root.io.9, 1.15.0-root.io.10, 1.13.5-root.io.10, 1.12.0-root.io.9, 1.15.0-root.io.11, 1.13.2-root.io.8, 1.8.4-root.io.9, 1.12.0-root.io.10, 1.15.0-root.io.12, 1.12.1-root.io.19` or later.
|
| ROOT-APP-NPM-CVE-2026-42037 |
|
Vulnerability in @rootio/axios (ROOT-APP-NPM-CVE-2026-42037)
vulnerability in @rootio/axios (ROOT-APP-NPM-CVE-2026-42037). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.13.5-root.io.5, 1.12.0-root.io.7, 1.13.2-root.io.6, 1.15.0-root.io.5, 1.13.6-root.io.3, 1.13.5-root.io.6, 1.12.0-root.io.8, 1.13.5-root.io.7, 1.13.2-root.io.7, 1.13.5-root.io.8, 1.12.1-root.io.18, 1.13.5-root.io.9, 1.15.0-root.io.9, 1.15.0-root.io.10, 1.13.5-root.io.10, 1.12.0-root.io.9, 1.15.0-root.io.11, 1.13.2-root.io.8, 1.8.4-root.io.9, 1.12.0-root.io.10, 1.15.0-root.io.12, 1.12.1-root.io.19` or later.
|
| ROOT-APP-NPM-CVE-2026-42034 |
|
Vulnerability in @rootio/axios (ROOT-APP-NPM-CVE-2026-42034)
vulnerability in @rootio/axios (ROOT-APP-NPM-CVE-2026-42034). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.13.5-root.io.5, 1.12.0-root.io.7, 1.13.2-root.io.6, 1.15.0-root.io.5, 1.13.6-root.io.3, 1.13.5-root.io.6, 1.12.0-root.io.8, 1.13.5-root.io.7, 1.13.2-root.io.7, 1.13.5-root.io.8, 1.12.1-root.io.18, 1.13.5-root.io.9, 1.15.0-root.io.9, 1.15.0-root.io.10, 1.13.5-root.io.10, 1.12.0-root.io.9, 1.15.0-root.io.11, 1.13.2-root.io.8, 1.8.4-root.io.9, 1.12.0-root.io.10, 1.15.0-root.io.12, 1.12.1-root.io.19` or later.
|
| ROOT-APP-NPM-CVE-2026-42036 |
|
Vulnerability in @rootio/axios (ROOT-APP-NPM-CVE-2026-42036)
vulnerability in @rootio/axios (ROOT-APP-NPM-CVE-2026-42036). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.13.5-root.io.5, 1.12.0-root.io.7, 1.13.2-root.io.6, 1.15.0-root.io.5, 1.13.6-root.io.3, 1.13.5-root.io.6, 1.12.0-root.io.8, 1.13.5-root.io.7, 1.13.2-root.io.7, 1.13.5-root.io.8, 1.12.1-root.io.18, 1.13.5-root.io.9, 1.15.0-root.io.9, 1.15.0-root.io.10, 1.13.5-root.io.10, 1.12.0-root.io.9, 1.15.0-root.io.11, 1.13.2-root.io.8, 1.8.4-root.io.9, 1.12.0-root.io.10, 1.15.0-root.io.12, 1.12.1-root.io.19` or later.
|
| ROOT-APP-NPM-CVE-2026-42042 |
|
Vulnerability in @rootio/axios (ROOT-APP-NPM-CVE-2026-42042)
vulnerability in @rootio/axios (ROOT-APP-NPM-CVE-2026-42042). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.13.5-root.io.5, 1.12.0-root.io.7, 1.13.2-root.io.6, 1.15.0-root.io.5, 1.13.6-root.io.3, 1.13.5-root.io.6, 1.12.0-root.io.8, 1.13.5-root.io.7, 1.13.2-root.io.7, 1.13.5-root.io.8, 1.12.1-root.io.18, 1.13.5-root.io.9, 1.15.0-root.io.9, 1.15.0-root.io.10, 1.13.5-root.io.10, 1.12.0-root.io.9, 1.15.0-root.io.11, 1.13.2-root.io.8, 1.8.4-root.io.9, 1.12.0-root.io.10, 1.15.0-root.io.12, 1.12.1-root.io.19` or later.
|
| MAL-2026-5182 |
|
Vulnerability in brave-search-mcp-server (MAL-2026-5182)
vulnerability in brave-search-mcp-server (MAL-2026-5182). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5078 |
|
Vulnerability in morgan (CVE-2026-5078)
vulnerability in morgan (CVE-2026-5078). Risk of unauthorized operations or information disclosure. Exploitable via ``Authorization``. Mitigation: upgrade to `1.11.0` or later.
|
| SUSE-SU-2026:2229-1 |
|
Vulnerability in SUSE-SU-2026:2229-1 (SUSE-SU-2026:2229-1)
vulnerability in SUSE-SU-2026:2229-1 (SUSE-SU-2026:2229-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:2228-1 |
|
Vulnerability in SUSE-SU-2026:2228-1 (SUSE-SU-2026:2228-1)
vulnerability in SUSE-SU-2026:2228-1 (SUSE-SU-2026:2228-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:2227-1 |
|
Vulnerability in SUSE-SU-2026:2227-1 (SUSE-SU-2026:2227-1)
vulnerability in SUSE-SU-2026:2227-1 (SUSE-SU-2026:2227-1). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-NPM-CVE-2022-24434 |
|
Vulnerability in @rootio/dicer (ROOT-APP-NPM-CVE-2022-24434)
vulnerability in @rootio/dicer (ROOT-APP-NPM-CVE-2022-24434). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.2.5-root.io.1, 0.2.5-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2026-40972 |
|
Vulnerability in io.root.org.springframework.boot:spring-boot-devtools (ROOT-APP-MAVEN-CVE-2026-40972)
vulnerability in io.root.org.springframework.boot:spring-boot-devtools (ROOT-APP-MAVEN-CVE-2026-40972). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.4-root.io.2, 3.3.4-root.io.3` or later.
|
| ROOT-OS-UBUNTU-2204-CVE-2026-5704 |
|
Vulnerability in rootio-tar (ROOT-OS-UBUNTU-2204-CVE-2026-5704)
vulnerability in rootio-tar (ROOT-OS-UBUNTU-2204-CVE-2026-5704). Data can be tampered with by attackers. Mitigation: upgrade to `1.34+dfsg-1build3.root.io.1` or later.
|
| USN-8363-2 |
|
Vulnerability in mysql-8.0 (USN-8363-2)
vulnerability in mysql-8.0 (USN-8363-2). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.46-0ubuntu0.20.04.1+esm2` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46124 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46124)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46124). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46115 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46115)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46115). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46184 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46184)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46184). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46136 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46136)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46136). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46026 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46026)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46026). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46204 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46204)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46204). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-45899 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45899)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45899). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-45846 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45846)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45846). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-45999 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45999)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45999). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-45839 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45839)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45839). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-45985 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45985)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45985). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46111 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46111)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46111). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-45994 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45994)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45994). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-45894 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45894)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45894). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46098 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46098)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46098). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46059 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46059)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46059). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46044 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46044)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46044). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46051 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46051)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46051). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46075 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46075)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46075). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-45836 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45836)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45836). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46123 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46123)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46123). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46127 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46127)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46127). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46169 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46169)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46169). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46058 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46058)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46058). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-45911 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45911)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-45911). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46129 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46129)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46129). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46131 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46131)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46131). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-46106 |
|
Vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46106)
vulnerability in rootio-linux (ROOT-OS-UBUNTU-2404-CVE-2026-46106). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-124.124.root.io.70, 6.8.0-124.124.root.io.71, 6.8.0-124.124.root.io.72` or later.
|