Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
MAL-2026-4594 Vulnerability in koishi-plugin-fusheng-car (MAL-2026-4594)
vulnerability in koishi-plugin-fusheng-car (MAL-2026-4594). Risk of unauthorized operations or information disclosure.
CLSA-2026-1779292803 Vulnerability in libapache2-mod-php7.3 (CLSA-2026-1779292803)
vulnerability in libapache2-mod-php7.3 (CLSA-2026-1779292803). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.3.31-1~deb10u7+tuxcare.els6` or later.
MAL-2026-4550 Vulnerability in emojifancy-print (MAL-2026-4550)
vulnerability in emojifancy-print (MAL-2026-4550). Risk of unauthorized operations or information disclosure. Exploitable via ``_resolveConfig``.
CLSA-2026-1779712300 Vulnerability in libnginx-mod-http-auth-pam (CLSA-2026-1779712300)
vulnerability in libnginx-mod-http-auth-pam (CLSA-2026-1779712300). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.18.0-0ubuntu1.7+tuxcare.els3` or later.
MAL-2026-4350 Vulnerability in clobprice.api (MAL-2026-4350)
vulnerability in clobprice.api (MAL-2026-4350). Risk of unauthorized operations or information disclosure. Exploitable via ``clob.js``.
MAL-2026-4349 Vulnerability in clob.api (MAL-2026-4349)
vulnerability in clob.api (MAL-2026-4349). Risk of unauthorized operations or information disclosure. Exploitable via ``clob.js``.
MAL-2026-4347 Vulnerability in @devcarron/clob (MAL-2026-4347)
vulnerability in @devcarron/clob (MAL-2026-4347). Risk of unauthorized operations or information disclosure. Exploitable via ``clob.js``.
MAL-2026-4485 Vulnerability in atel-mcp-openclaw (MAL-2026-4485)
vulnerability in atel-mcp-openclaw (MAL-2026-4485). Risk of unauthorized operations or information disclosure.
ROOT-APP-MAVEN-CVE-2025-66168 Vulnerability in io.root.org.apache.activemq:activemq-mqtt (ROOT-APP-MAVEN-CVE-2025-66168)
vulnerability in io.root.org.apache.activemq:activemq-mqtt (ROOT-APP-MAVEN-CVE-2025-66168). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.18.3-root.io.1, 6.1.3-root.io.2, 6.1.3-root.io.3, 5.18.3-root.io.8, 6.1.3-root.io.4` or later.
MAL-2026-4527 Vulnerability in clawpro-diagnostics-metrics-cls (MAL-2026-4527)
vulnerability in clawpro-diagnostics-metrics-cls (MAL-2026-4527). Risk of unauthorized operations or information disclosure.
ROOT-APP-MAVEN-CVE-2024-49203 Vulnerability in io.root.com.querydsl:querydsl-jpa (ROOT-APP-MAVEN-CVE-2024-49203)
vulnerability in io.root.com.querydsl:querydsl-jpa (ROOT-APP-MAVEN-CVE-2024-49203). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.1.0-root.io.1, 5.0.0-root.io.1` or later.
USN-8300-1 Vulnerability in ngtcp2 (USN-8300-1)
vulnerability in ngtcp2 (USN-8300-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.1.0+dfsg-1ubuntu0.1~esm1` or later.
ROOT-APP-PYPI-CVE-2019-11324 Vulnerability in rootio-urllib3 (ROOT-APP-PYPI-CVE-2019-11324)
vulnerability in rootio-urllib3 (ROOT-APP-PYPI-CVE-2019-11324). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.23+root.io.1, 1.23+root.io.2, 1.23+root.io.5, 1.23+root.io.6, 1.23+root.io.7, 1.23+root.io.8, 1.23+root.io.9, 1.21.1+root.io.1, 1.23+root.io.10, 1.21.1+root.io.2, 1.23+root.io.11, 1.21.1+root.io.3, 1.21.1+root.io.4` or later.
ROOT-APP-PYPI-CVE-2018-20060 Vulnerability in rootio-urllib3 (ROOT-APP-PYPI-CVE-2018-20060)
vulnerability in rootio-urllib3 (ROOT-APP-PYPI-CVE-2018-20060). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.21.1+root.io.1, 1.21.1+root.io.2, 1.21.1+root.io.3, 1.21.1+root.io.4` or later.
MAL-2026-4616 Vulnerability in muaddib-scanner (MAL-2026-4616)
vulnerability in muaddib-scanner (MAL-2026-4616). Risk of unauthorized operations or information disclosure. Exploitable via ``loadash``.
MAL-2026-4631 Vulnerability in opentiny-react (MAL-2026-4631)
vulnerability in opentiny-react (MAL-2026-4631). Risk of unauthorized operations or information disclosure. Exploitable via ``tinymce``.
ALPINE-CVE-2026-5222 Vulnerability in rust (ALPINE-CVE-2026-5222)
vulnerability in rust (ALPINE-CVE-2026-5222). Confidential information can be exposed externally. Mitigation: upgrade to `1.91.1-r2` or later.
ALPINE-CVE-2026-5223 Vulnerability in rust (ALPINE-CVE-2026-5223)
vulnerability in rust (ALPINE-CVE-2026-5223). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.91.1-r2` or later.
DEBIAN-CVE-2026-5223 Vulnerability in cargo (DEBIAN-CVE-2026-5223)
vulnerability in cargo (DEBIAN-CVE-2026-5223). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.91.0-3` or later.
DEBIAN-CVE-2026-5222 Vulnerability in cargo (DEBIAN-CVE-2026-5222)
vulnerability in cargo (DEBIAN-CVE-2026-5222). Confidential information can be exposed externally. Mitigation: upgrade to `0.91.0-3` or later.
CVE-2026-5223 Vulnerability in cargo (CVE-2026-5223)
vulnerability in cargo (CVE-2026-5223). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.97.0` or later.
CVE-2026-5222 Vulnerability in cargo (CVE-2026-5222)
vulnerability in cargo (CVE-2026-5222). Confidential information can be exposed externally. Exploitable via ``foo``. Mitigation: upgrade to `0.97.0` or later.
GHSA-mw3r-368h-vrgv Vulnerability in auth-basic-vault (GHSA-mw3r-368h-vrgv)
vulnerability in auth-basic-vault (GHSA-mw3r-368h-vrgv). Risk of unauthorized operations or information disclosure.
MAL-2026-4488 Vulnerability in auth-basic-vault (MAL-2026-4488)
vulnerability in auth-basic-vault (MAL-2026-4488). Risk of unauthorized operations or information disclosure.
ROOT-APP-PYPI-CVE-2024-12797 Vulnerability in rootio-cryptography (ROOT-APP-PYPI-CVE-2024-12797)
vulnerability in rootio-cryptography (ROOT-APP-PYPI-CVE-2024-12797). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `43.0.1+root.io.2, 43.0.1+root.io.3` or later.
MAL-2026-4823 Vulnerability in msc-terminal (MAL-2026-4823)
vulnerability in msc-terminal (MAL-2026-4823). Risk of unauthorized operations or information disclosure. Exploitable via ``nhpkevte1576``.
GHSA-fx94-j779-7c6j Vulnerability in authcascade (GHSA-fx94-j779-7c6j)
vulnerability in authcascade (GHSA-fx94-j779-7c6j). Risk of unauthorized operations or information disclosure. Exploitable via ``pino``.
MAL-2026-4491 Vulnerability in authcascade (MAL-2026-4491)
vulnerability in authcascade (MAL-2026-4491). Risk of unauthorized operations or information disclosure. Exploitable via ``pino``.
MAL-2026-4419 Vulnerability in @pmate/utils (MAL-2026-4419)
vulnerability in @pmate/utils (MAL-2026-4419). Risk of unauthorized operations or information disclosure. Exploitable via ``AIzaSyB60IT_Mte2tZisNiBujfS_q9MPOnw6tgk``.
ROOT-APP-MAVEN-CVE-2025-7962 Vulnerability in io.root.org.eclipse.angus:smtp (ROOT-APP-MAVEN-CVE-2025-7962)
vulnerability in io.root.org.eclipse.angus:smtp (ROOT-APP-MAVEN-CVE-2025-7962). Data can be tampered with by attackers. Mitigation: upgrade to `2.0.2-root.io.1, 2.0.3-root.io.4, 2.0.2-root.io.2, 2.0.3-root.io.5, 2.0.2-root.io.3` or later.
DEBIAN-CVE-2026-47732 DEBIAN-CVE-2026-47732
MAL-2026-4656 Vulnerability in raise-common-lib (MAL-2026-4656)
vulnerability in raise-common-lib (MAL-2026-4656). Risk of unauthorized operations or information disclosure.
CLSA-2026-1779701895 Vulnerability in podman (CLSA-2026-1779701895)
vulnerability in podman (CLSA-2026-1779701895). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5:5.4.0-13.el9_6.tuxcare.els5` or later.
CLSA-2026-1779371406 Vulnerability in vim-X11 (CLSA-2026-1779371406)
vulnerability in vim-X11 (CLSA-2026-1779371406). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.2.2637-22.el9_6.1.tuxcare.els29` or later.
CLSA-2026-1779700361 Vulnerability in vim-X11 (CLSA-2026-1779700361)
vulnerability in vim-X11 (CLSA-2026-1779700361). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.2.2637-22.el9_2.1.tuxcare.els29` or later.
MAL-2026-4511 Vulnerability in chai-as-patch (MAL-2026-4511)
vulnerability in chai-as-patch (MAL-2026-4511). Risk of unauthorized operations or information disclosure. Exploitable via ``require``.
openSUSE-SU-2026:20792-1 Vulnerability in openSUSE-SU-2026:20792-1 (openSUSE-SU-2026:20792-1)
vulnerability in openSUSE-SU-2026:20792-1 (openSUSE-SU-2026:20792-1). Risk of unauthorized operations or information disclosure.
GHSA-jp5r-76w9-2rvh Vulnerability in ts-stream-compose (GHSA-jp5r-76w9-2rvh)
vulnerability in ts-stream-compose (GHSA-jp5r-76w9-2rvh). Risk of unauthorized operations or information disclosure.
GHSA-6pxr-857g-mr97 Vulnerability in jules-standard (GHSA-6pxr-857g-mr97)
vulnerability in jules-standard (GHSA-6pxr-857g-mr97). Risk of unauthorized operations or information disclosure.
GHSA-59j3-wvx3-w9hx Vulnerability in @gbrlxvii/ts-env-validator (GHSA-59j3-wvx3-w9hx)
vulnerability in @gbrlxvii/ts-env-validator (GHSA-59j3-wvx3-w9hx). Risk of unauthorized operations or information disclosure.
GHSA-66j8-7w8q-vvf5 Vulnerability in ts-result-pipe (GHSA-66j8-7w8q-vvf5)
vulnerability in ts-result-pipe (GHSA-66j8-7w8q-vvf5). Risk of unauthorized operations or information disclosure.
GHSA-xqpr-hv2v-6pfj Vulnerability in ts-typeguard-utils (GHSA-xqpr-hv2v-6pfj)
vulnerability in ts-typeguard-utils (GHSA-xqpr-hv2v-6pfj). Risk of unauthorized operations or information disclosure.
GHSA-vxrv-934h-xj6q Vulnerability in ts-schema-config (GHSA-vxrv-934h-xj6q)
vulnerability in ts-schema-config (GHSA-vxrv-934h-xj6q). Risk of unauthorized operations or information disclosure.
GHSA-f6hr-rvf9-ch6p Vulnerability in ts-iter-utils (GHSA-f6hr-rvf9-ch6p)
vulnerability in ts-iter-utils (GHSA-f6hr-rvf9-ch6p). Risk of unauthorized operations or information disclosure.
GHSA-qgfv-9wmq-m4f7 Vulnerability in ts-config-mapper (GHSA-qgfv-9wmq-m4f7)
vulnerability in ts-config-mapper (GHSA-qgfv-9wmq-m4f7). Risk of unauthorized operations or information disclosure.
openSUSE-SU-2026:20794-1 Vulnerability in openSUSE-SU-2026:20794-1 (openSUSE-SU-2026:20794-1)
vulnerability in openSUSE-SU-2026:20794-1 (openSUSE-SU-2026:20794-1). Risk of unauthorized operations or information disclosure.
ROOT-APP-MAVEN-CVE-2024-38827 Vulnerability in io.root.org.springframework.security:spring-security-core (ROOT-APP-MAVEN-CVE-2024-38827)
vulnerability in io.root.org.springframework.security:spring-security-core (ROOT-APP-MAVEN-CVE-2024-38827). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.3.3-root.io.1, 5.7.1-root.io.1, 5.7.1-root.io.2, 6.3.3-root.io.1781448405, 6.3.3-root.io.1781450697` or later.
ROOT-APP-MAVEN-CVE-2026-22748 Vulnerability in io.root.org.springframework.security:spring-security-oauth2-jose (ROOT-APP-MAVEN-CVE-2026-22748)
vulnerability in io.root.org.springframework.security:spring-security-oauth2-jose (ROOT-APP-MAVEN-CVE-2026-22748). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.3.3-root.io.1, 6.5.9-root.io.1, 6.3.3-root.io.1781448405, 6.3.3-root.io.1781450697` or later.
ROOT-APP-MAVEN-CVE-2026-22732 Vulnerability in io.root.org.springframework.security:spring-security-web (ROOT-APP-MAVEN-CVE-2026-22732)
vulnerability in io.root.org.springframework.security:spring-security-web (ROOT-APP-MAVEN-CVE-2026-22732). Confidential information can be exposed externally. Mitigation: upgrade to `6.3.3-root.io.1, 6.3.3-root.io.1781448405, 6.3.3-root.io.1781450697` or later.
GHSA-qcrh-87jf-mm39 Vulnerability in internallib_v95 (GHSA-qcrh-87jf-mm39)
vulnerability in internallib_v95 (GHSA-qcrh-87jf-mm39). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →