Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| BELL-CVE-2026-43499 |
|
BELL-CVE-2026-43499 |
| BELL-CVE-2026-43497 |
|
BELL-CVE-2026-43497 |
| MAL-2026-4783 |
|
Vulnerability in @iola_adm/iola-cli (MAL-2026-4783)
vulnerability in @iola_adm/iola-cli (MAL-2026-4783). Risk of unauthorized operations or information disclosure.
|
| BELL-CVE-2026-43503 |
|
BELL-CVE-2026-43503 |
| BELL-CVE-2026-9256 |
|
BELL-CVE-2026-9256 |
| DEBIAN-CVE-2026-9496 |
|
Vulnerability in npm (DEBIAN-CVE-2026-9496)
vulnerability in npm (DEBIAN-CVE-2026-9496). Risk of unauthorized operations or information disclosure.
|
| GHSA-gqhv-x4hg-wqv4 |
|
Vulnerability in test-nonmal-pkg-5 (GHSA-gqhv-x4hg-wqv4)
vulnerability in test-nonmal-pkg-5 (GHSA-gqhv-x4hg-wqv4). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4785 |
|
Vulnerability in test-nonmal-pkg-5 (MAL-2026-4785)
vulnerability in test-nonmal-pkg-5 (MAL-2026-4785). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-9496 |
|
Vulnerability in npm (UBUNTU-CVE-2026-9496)
vulnerability in npm (UBUNTU-CVE-2026-9496). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:2065-1 |
|
Vulnerability in SUSE-SU-2026:2065-1 (SUSE-SU-2026:2065-1)
vulnerability in SUSE-SU-2026:2065-1 (SUSE-SU-2026:2065-1). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-MAVEN-CVE-2026-24400 |
|
Vulnerability in io.root.org.assertj:assertj-core (ROOT-APP-MAVEN-CVE-2026-24400)
vulnerability in io.root.org.assertj:assertj-core (ROOT-APP-MAVEN-CVE-2026-24400). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.24.2-root.io.1, 3.24.2-root.io.2` or later.
|
| MAL-2026-4786 |
|
Vulnerability in ranno (MAL-2026-4786)
vulnerability in ranno (MAL-2026-4786). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-48715 |
|
DEBIAN-CVE-2026-48715 |
| GHSA-v3j8-x82x-chvr |
|
Vulnerability in ether-bn.js (GHSA-v3j8-x82x-chvr)
vulnerability in ether-bn.js (GHSA-v3j8-x82x-chvr). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4779 |
|
Vulnerability in ether-bn.js (MAL-2026-4779)
vulnerability in ether-bn.js (MAL-2026-4779). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4780 |
|
Vulnerability in reasonix-plugmem (MAL-2026-4780)
vulnerability in reasonix-plugmem (MAL-2026-4780). Risk of unauthorized operations or information disclosure. Exploitable via ``apiKey``.
|
| GHSA-wp6h-8x7v-865g |
|
Vulnerability in unique-id-64 (GHSA-wp6h-8x7v-865g)
vulnerability in unique-id-64 (GHSA-wp6h-8x7v-865g). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4781 |
|
Vulnerability in unique-id-64 (MAL-2026-4781)
vulnerability in unique-id-64 (MAL-2026-4781). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4778 |
|
Vulnerability in 1cat-tunnel-client-zx (MAL-2026-4778)
vulnerability in 1cat-tunnel-client-zx (MAL-2026-4778). Risk of unauthorized operations or information disclosure. Exploitable via ``cli.js``.
|
| ROOT-APP-NPM-CVE-2026-33939 |
|
Vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33939)
vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33939). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.7.8-root.io.2, 4.7.8-root.io.3, 4.7.8-root.io.4, 4.7.8-root.io.5, 4.7.7-root.io.1, 4.7.7-root.io.2, 4.7.8-root.io.6, 4.7.7-root.io.3` or later.
|
| ROOT-APP-NPM-CVE-2026-33937 |
|
Vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33937)
vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33937). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.7.8-root.io.2, 4.7.8-root.io.3, 4.7.8-root.io.4, 4.7.8-root.io.5, 4.7.7-root.io.1, 4.7.7-root.io.2, 4.7.8-root.io.6, 4.7.7-root.io.3` or later.
|
| ROOT-APP-NPM-CVE-2026-33941 |
|
Vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33941)
vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33941). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.7.8-root.io.2, 4.7.8-root.io.3, 4.7.8-root.io.4, 4.7.8-root.io.5, 4.7.7-root.io.1, 4.7.7-root.io.2, 4.7.8-root.io.6, 4.7.7-root.io.3` or later.
|
| ROOT-APP-NPM-CVE-2026-33940 |
|
Vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33940)
vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33940). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.7.8-root.io.2, 4.7.8-root.io.3, 4.7.8-root.io.4, 4.7.8-root.io.5, 4.7.7-root.io.1, 4.7.7-root.io.2, 4.7.8-root.io.6, 4.7.7-root.io.3` or later.
|
| ROOT-APP-NPM-CVE-2026-33938 |
|
Vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33938)
vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33938). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.7.8-root.io.1, 4.7.8-root.io.2, 4.7.8-root.io.3, 4.7.8-root.io.4, 4.7.8-root.io.5, 4.7.7-root.io.1, 4.7.7-root.io.2, 4.7.8-root.io.6, 4.7.7-root.io.3` or later.
|
| MINI-cmmm-vp98-cjhp |
|
MINI-cmmm-vp98-cjhp |
| MAL-2026-4357 |
|
Vulnerability in helu (MAL-2026-4357)
vulnerability in helu (MAL-2026-4357). Risk of unauthorized operations or information disclosure.
|
| ROOT-OS-DEBIAN-12-CVE-2026-43503 |
|
Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43503)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43503). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
|
| GHSA-4847-p5f9-4366 |
|
Vulnerability in testing-on-npmjs (GHSA-4847-p5f9-4366)
vulnerability in testing-on-npmjs (GHSA-4847-p5f9-4366). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
|
| MAL-2026-4356 |
|
Vulnerability in testing-on-npmjs (MAL-2026-4356)
vulnerability in testing-on-npmjs (MAL-2026-4356). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
|
| MAL-2026-4358 |
|
Vulnerability in mistral-search-toolkit (MAL-2026-4358)
vulnerability in mistral-search-toolkit (MAL-2026-4358). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4355 |
|
Vulnerability in mistral-workflows-plugins-webhook (MAL-2026-4355)
vulnerability in mistral-workflows-plugins-webhook (MAL-2026-4355). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4354 |
|
Vulnerability in mistral-workflows-plugins-mistralai (MAL-2026-4354)
vulnerability in mistral-workflows-plugins-mistralai (MAL-2026-4354). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4353 |
|
Vulnerability in mistral-workflows (MAL-2026-4353)
vulnerability in mistral-workflows (MAL-2026-4353). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-9538 |
|
Vulnerability in perl (DEBIAN-CVE-2026-9538)
vulnerability in perl (DEBIAN-CVE-2026-9538). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-42497 |
|
Vulnerability in perl (DEBIAN-CVE-2026-42497)
vulnerability in perl (DEBIAN-CVE-2026-42497). Data can be tampered with by attackers.
|
| DEBIAN-CVE-2026-42496 |
|
Vulnerability in perl (DEBIAN-CVE-2026-42496)
vulnerability in perl (DEBIAN-CVE-2026-42496). Confidential information can be exposed externally.
|
| MGASA-2026-0154 |
|
Vulnerability in perl-Imager (MGASA-2026-0154)
vulnerability in perl-Imager (MGASA-2026-0154). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.19.0-2.1.mga9` or later.
|
| MGASA-2026-0155 |
|
Vulnerability in x11-server (MGASA-2026-0155)
vulnerability in x11-server (MGASA-2026-0155). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `21.1.8-7.10.mga9` or later.
|
| MGASA-2026-0153 |
|
Vulnerability in ffmpeg (MGASA-2026-0153)
vulnerability in ffmpeg (MGASA-2026-0153). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.1.9-1.mga9.tainted` or later.
|
| MGASA-2026-0156 |
|
Vulnerability in nginx (MGASA-2026-0156)
vulnerability in nginx (MGASA-2026-0156). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.30.1-1.mga9` or later.
|
| GHSA-hr8w-cxp4-33p7 |
|
Vulnerability in wao (GHSA-hr8w-cxp4-33p7)
vulnerability in wao (GHSA-hr8w-cxp4-33p7). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4711 |
|
Vulnerability in wao (MAL-2026-4711)
vulnerability in wao (MAL-2026-4711). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4720 |
|
Vulnerability in weavedb-lite (MAL-2026-4720)
vulnerability in weavedb-lite (MAL-2026-4720). Risk of unauthorized operations or information disclosure. Exploitable via ``bin``.
|
| MAL-2026-4727 |
|
Vulnerability in weavedb-warp-contracts-plugin-deploy (MAL-2026-4727)
vulnerability in weavedb-warp-contracts-plugin-deploy (MAL-2026-4727). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4717 |
|
Vulnerability in weavedb-console (MAL-2026-4717)
vulnerability in weavedb-console (MAL-2026-4717). Risk of unauthorized operations or information disclosure. Exploitable via ``api.github.com``.
|
| MAL-2026-4724 |
|
Vulnerability in weavedb-sdk-base (MAL-2026-4724)
vulnerability in weavedb-sdk-base (MAL-2026-4724). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4718 |
|
Vulnerability in weavedb-exm-sdk (MAL-2026-4718)
vulnerability in weavedb-exm-sdk (MAL-2026-4718). Risk of unauthorized operations or information disclosure. Exploitable via ``LIBBPF``.
|
| MAL-2026-4538 |
|
Vulnerability in create-arnext-app (MAL-2026-4538)
vulnerability in create-arnext-app (MAL-2026-4538). Risk of unauthorized operations or information disclosure. Exploitable via ``yarn``.
|
| MAL-2026-4483 |
|
Vulnerability in arnext-arkb (MAL-2026-4483)
vulnerability in arnext-arkb (MAL-2026-4483). Risk of unauthorized operations or information disclosure. Exploitable via ``LIBBPF``.
|
| MAL-2026-4663 |
|
Vulnerability in roidjs (MAL-2026-4663)
vulnerability in roidjs (MAL-2026-4663). Risk of unauthorized operations or information disclosure. Exploitable via ``LIBBPF_0.0``.
|