Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
BELL-CVE-2026-43499 BELL-CVE-2026-43499
BELL-CVE-2026-43497 BELL-CVE-2026-43497
MAL-2026-4783 Vulnerability in @iola_adm/iola-cli (MAL-2026-4783)
vulnerability in @iola_adm/iola-cli (MAL-2026-4783). Risk of unauthorized operations or information disclosure.
BELL-CVE-2026-43503 BELL-CVE-2026-43503
BELL-CVE-2026-9256 BELL-CVE-2026-9256
DEBIAN-CVE-2026-9496 Vulnerability in npm (DEBIAN-CVE-2026-9496)
vulnerability in npm (DEBIAN-CVE-2026-9496). Risk of unauthorized operations or information disclosure.
GHSA-gqhv-x4hg-wqv4 Vulnerability in test-nonmal-pkg-5 (GHSA-gqhv-x4hg-wqv4)
vulnerability in test-nonmal-pkg-5 (GHSA-gqhv-x4hg-wqv4). Risk of unauthorized operations or information disclosure.
MAL-2026-4785 Vulnerability in test-nonmal-pkg-5 (MAL-2026-4785)
vulnerability in test-nonmal-pkg-5 (MAL-2026-4785). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-9496 Vulnerability in npm (UBUNTU-CVE-2026-9496)
vulnerability in npm (UBUNTU-CVE-2026-9496). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:2065-1 Vulnerability in SUSE-SU-2026:2065-1 (SUSE-SU-2026:2065-1)
vulnerability in SUSE-SU-2026:2065-1 (SUSE-SU-2026:2065-1). Risk of unauthorized operations or information disclosure.
ROOT-APP-MAVEN-CVE-2026-24400 Vulnerability in io.root.org.assertj:assertj-core (ROOT-APP-MAVEN-CVE-2026-24400)
vulnerability in io.root.org.assertj:assertj-core (ROOT-APP-MAVEN-CVE-2026-24400). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.24.2-root.io.1, 3.24.2-root.io.2` or later.
MAL-2026-4786 Vulnerability in ranno (MAL-2026-4786)
vulnerability in ranno (MAL-2026-4786). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-48715 DEBIAN-CVE-2026-48715
GHSA-v3j8-x82x-chvr Vulnerability in ether-bn.js (GHSA-v3j8-x82x-chvr)
vulnerability in ether-bn.js (GHSA-v3j8-x82x-chvr). Risk of unauthorized operations or information disclosure.
MAL-2026-4779 Vulnerability in ether-bn.js (MAL-2026-4779)
vulnerability in ether-bn.js (MAL-2026-4779). Risk of unauthorized operations or information disclosure.
MAL-2026-4780 Vulnerability in reasonix-plugmem (MAL-2026-4780)
vulnerability in reasonix-plugmem (MAL-2026-4780). Risk of unauthorized operations or information disclosure. Exploitable via ``apiKey``.
GHSA-wp6h-8x7v-865g Vulnerability in unique-id-64 (GHSA-wp6h-8x7v-865g)
vulnerability in unique-id-64 (GHSA-wp6h-8x7v-865g). Risk of unauthorized operations or information disclosure.
MAL-2026-4781 Vulnerability in unique-id-64 (MAL-2026-4781)
vulnerability in unique-id-64 (MAL-2026-4781). Risk of unauthorized operations or information disclosure.
MAL-2026-4778 Vulnerability in 1cat-tunnel-client-zx (MAL-2026-4778)
vulnerability in 1cat-tunnel-client-zx (MAL-2026-4778). Risk of unauthorized operations or information disclosure. Exploitable via ``cli.js``.
ROOT-APP-NPM-CVE-2026-33939 Vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33939)
vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33939). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.7.8-root.io.2, 4.7.8-root.io.3, 4.7.8-root.io.4, 4.7.8-root.io.5, 4.7.7-root.io.1, 4.7.7-root.io.2, 4.7.8-root.io.6, 4.7.7-root.io.3` or later.
ROOT-APP-NPM-CVE-2026-33937 Vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33937)
vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33937). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.7.8-root.io.2, 4.7.8-root.io.3, 4.7.8-root.io.4, 4.7.8-root.io.5, 4.7.7-root.io.1, 4.7.7-root.io.2, 4.7.8-root.io.6, 4.7.7-root.io.3` or later.
ROOT-APP-NPM-CVE-2026-33941 Vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33941)
vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33941). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.7.8-root.io.2, 4.7.8-root.io.3, 4.7.8-root.io.4, 4.7.8-root.io.5, 4.7.7-root.io.1, 4.7.7-root.io.2, 4.7.8-root.io.6, 4.7.7-root.io.3` or later.
ROOT-APP-NPM-CVE-2026-33940 Vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33940)
vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33940). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.7.8-root.io.2, 4.7.8-root.io.3, 4.7.8-root.io.4, 4.7.8-root.io.5, 4.7.7-root.io.1, 4.7.7-root.io.2, 4.7.8-root.io.6, 4.7.7-root.io.3` or later.
ROOT-APP-NPM-CVE-2026-33938 Vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33938)
vulnerability in @rootio/handlebars (ROOT-APP-NPM-CVE-2026-33938). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.7.8-root.io.1, 4.7.8-root.io.2, 4.7.8-root.io.3, 4.7.8-root.io.4, 4.7.8-root.io.5, 4.7.7-root.io.1, 4.7.7-root.io.2, 4.7.8-root.io.6, 4.7.7-root.io.3` or later.
MINI-cmmm-vp98-cjhp MINI-cmmm-vp98-cjhp
MAL-2026-4357 Vulnerability in helu (MAL-2026-4357)
vulnerability in helu (MAL-2026-4357). Risk of unauthorized operations or information disclosure.
ROOT-OS-DEBIAN-12-CVE-2026-43503 Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43503)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43503). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
GHSA-4847-p5f9-4366 Vulnerability in testing-on-npmjs (GHSA-4847-p5f9-4366)
vulnerability in testing-on-npmjs (GHSA-4847-p5f9-4366). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
MAL-2026-4356 Vulnerability in testing-on-npmjs (MAL-2026-4356)
vulnerability in testing-on-npmjs (MAL-2026-4356). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
MAL-2026-4358 Vulnerability in mistral-search-toolkit (MAL-2026-4358)
vulnerability in mistral-search-toolkit (MAL-2026-4358). Risk of unauthorized operations or information disclosure.
MAL-2026-4355 Vulnerability in mistral-workflows-plugins-webhook (MAL-2026-4355)
vulnerability in mistral-workflows-plugins-webhook (MAL-2026-4355). Risk of unauthorized operations or information disclosure.
MAL-2026-4354 Vulnerability in mistral-workflows-plugins-mistralai (MAL-2026-4354)
vulnerability in mistral-workflows-plugins-mistralai (MAL-2026-4354). Risk of unauthorized operations or information disclosure.
MAL-2026-4353 Vulnerability in mistral-workflows (MAL-2026-4353)
vulnerability in mistral-workflows (MAL-2026-4353). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-9538 Vulnerability in perl (DEBIAN-CVE-2026-9538)
vulnerability in perl (DEBIAN-CVE-2026-9538). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-42497 Vulnerability in perl (DEBIAN-CVE-2026-42497)
vulnerability in perl (DEBIAN-CVE-2026-42497). Data can be tampered with by attackers.
DEBIAN-CVE-2026-42496 Vulnerability in perl (DEBIAN-CVE-2026-42496)
vulnerability in perl (DEBIAN-CVE-2026-42496). Confidential information can be exposed externally.
MGASA-2026-0154 Vulnerability in perl-Imager (MGASA-2026-0154)
vulnerability in perl-Imager (MGASA-2026-0154). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.19.0-2.1.mga9` or later.
MGASA-2026-0155 Vulnerability in x11-server (MGASA-2026-0155)
vulnerability in x11-server (MGASA-2026-0155). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `21.1.8-7.10.mga9` or later.
MGASA-2026-0153 Vulnerability in ffmpeg (MGASA-2026-0153)
vulnerability in ffmpeg (MGASA-2026-0153). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.1.9-1.mga9.tainted` or later.
MGASA-2026-0156 Vulnerability in nginx (MGASA-2026-0156)
vulnerability in nginx (MGASA-2026-0156). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.30.1-1.mga9` or later.
GHSA-hr8w-cxp4-33p7 Vulnerability in wao (GHSA-hr8w-cxp4-33p7)
vulnerability in wao (GHSA-hr8w-cxp4-33p7). Risk of unauthorized operations or information disclosure.
MAL-2026-4711 Vulnerability in wao (MAL-2026-4711)
vulnerability in wao (MAL-2026-4711). Risk of unauthorized operations or information disclosure.
MAL-2026-4720 Vulnerability in weavedb-lite (MAL-2026-4720)
vulnerability in weavedb-lite (MAL-2026-4720). Risk of unauthorized operations or information disclosure. Exploitable via ``bin``.
MAL-2026-4727 Vulnerability in weavedb-warp-contracts-plugin-deploy (MAL-2026-4727)
vulnerability in weavedb-warp-contracts-plugin-deploy (MAL-2026-4727). Risk of unauthorized operations or information disclosure.
MAL-2026-4717 Vulnerability in weavedb-console (MAL-2026-4717)
vulnerability in weavedb-console (MAL-2026-4717). Risk of unauthorized operations or information disclosure. Exploitable via ``api.github.com``.
MAL-2026-4724 Vulnerability in weavedb-sdk-base (MAL-2026-4724)
vulnerability in weavedb-sdk-base (MAL-2026-4724). Risk of unauthorized operations or information disclosure.
MAL-2026-4718 Vulnerability in weavedb-exm-sdk (MAL-2026-4718)
vulnerability in weavedb-exm-sdk (MAL-2026-4718). Risk of unauthorized operations or information disclosure. Exploitable via ``LIBBPF``.
MAL-2026-4538 Vulnerability in create-arnext-app (MAL-2026-4538)
vulnerability in create-arnext-app (MAL-2026-4538). Risk of unauthorized operations or information disclosure. Exploitable via ``yarn``.
MAL-2026-4483 Vulnerability in arnext-arkb (MAL-2026-4483)
vulnerability in arnext-arkb (MAL-2026-4483). Risk of unauthorized operations or information disclosure. Exploitable via ``LIBBPF``.
MAL-2026-4663 Vulnerability in roidjs (MAL-2026-4663)
vulnerability in roidjs (MAL-2026-4663). Risk of unauthorized operations or information disclosure. Exploitable via ``LIBBPF_0.0``.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →