Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| MAL-2026-4594 |
|
Vulnerability in koishi-plugin-fusheng-car (MAL-2026-4594)
vulnerability in koishi-plugin-fusheng-car (MAL-2026-4594). Risk of unauthorized operations or information disclosure.
|
| CLSA-2026-1779292803 |
|
Vulnerability in libapache2-mod-php7.3 (CLSA-2026-1779292803)
vulnerability in libapache2-mod-php7.3 (CLSA-2026-1779292803). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.3.31-1~deb10u7+tuxcare.els6` or later.
|
| MAL-2026-4550 |
|
Vulnerability in emojifancy-print (MAL-2026-4550)
vulnerability in emojifancy-print (MAL-2026-4550). Risk of unauthorized operations or information disclosure. Exploitable via ``_resolveConfig``.
|
| CLSA-2026-1779712300 |
|
Vulnerability in libnginx-mod-http-auth-pam (CLSA-2026-1779712300)
vulnerability in libnginx-mod-http-auth-pam (CLSA-2026-1779712300). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.18.0-0ubuntu1.7+tuxcare.els3` or later.
|
| MAL-2026-4350 |
|
Vulnerability in clobprice.api (MAL-2026-4350)
vulnerability in clobprice.api (MAL-2026-4350). Risk of unauthorized operations or information disclosure. Exploitable via ``clob.js``.
|
| MAL-2026-4349 |
|
Vulnerability in clob.api (MAL-2026-4349)
vulnerability in clob.api (MAL-2026-4349). Risk of unauthorized operations or information disclosure. Exploitable via ``clob.js``.
|
| MAL-2026-4347 |
|
Vulnerability in @devcarron/clob (MAL-2026-4347)
vulnerability in @devcarron/clob (MAL-2026-4347). Risk of unauthorized operations or information disclosure. Exploitable via ``clob.js``.
|
| MAL-2026-4485 |
|
Vulnerability in atel-mcp-openclaw (MAL-2026-4485)
vulnerability in atel-mcp-openclaw (MAL-2026-4485). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-MAVEN-CVE-2025-66168 |
|
Vulnerability in io.root.org.apache.activemq:activemq-mqtt (ROOT-APP-MAVEN-CVE-2025-66168)
vulnerability in io.root.org.apache.activemq:activemq-mqtt (ROOT-APP-MAVEN-CVE-2025-66168). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.18.3-root.io.1, 6.1.3-root.io.2, 6.1.3-root.io.3, 5.18.3-root.io.8, 6.1.3-root.io.4` or later.
|
| MAL-2026-4527 |
|
Vulnerability in clawpro-diagnostics-metrics-cls (MAL-2026-4527)
vulnerability in clawpro-diagnostics-metrics-cls (MAL-2026-4527). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-MAVEN-CVE-2024-49203 |
|
Vulnerability in io.root.com.querydsl:querydsl-jpa (ROOT-APP-MAVEN-CVE-2024-49203)
vulnerability in io.root.com.querydsl:querydsl-jpa (ROOT-APP-MAVEN-CVE-2024-49203). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.1.0-root.io.1, 5.0.0-root.io.1` or later.
|
| USN-8300-1 |
|
Vulnerability in ngtcp2 (USN-8300-1)
vulnerability in ngtcp2 (USN-8300-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.1.0+dfsg-1ubuntu0.1~esm1` or later.
|
| ROOT-APP-PYPI-CVE-2019-11324 |
|
Vulnerability in rootio-urllib3 (ROOT-APP-PYPI-CVE-2019-11324)
vulnerability in rootio-urllib3 (ROOT-APP-PYPI-CVE-2019-11324). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.23+root.io.1, 1.23+root.io.2, 1.23+root.io.5, 1.23+root.io.6, 1.23+root.io.7, 1.23+root.io.8, 1.23+root.io.9, 1.21.1+root.io.1, 1.23+root.io.10, 1.21.1+root.io.2, 1.23+root.io.11, 1.21.1+root.io.3, 1.21.1+root.io.4` or later.
|
| ROOT-APP-PYPI-CVE-2018-20060 |
|
Vulnerability in rootio-urllib3 (ROOT-APP-PYPI-CVE-2018-20060)
vulnerability in rootio-urllib3 (ROOT-APP-PYPI-CVE-2018-20060). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.21.1+root.io.1, 1.21.1+root.io.2, 1.21.1+root.io.3, 1.21.1+root.io.4` or later.
|
| MAL-2026-4616 |
|
Vulnerability in muaddib-scanner (MAL-2026-4616)
vulnerability in muaddib-scanner (MAL-2026-4616). Risk of unauthorized operations or information disclosure. Exploitable via ``loadash``.
|
| MAL-2026-4631 |
|
Vulnerability in opentiny-react (MAL-2026-4631)
vulnerability in opentiny-react (MAL-2026-4631). Risk of unauthorized operations or information disclosure. Exploitable via ``tinymce``.
|
| ALPINE-CVE-2026-5222 |
|
Vulnerability in rust (ALPINE-CVE-2026-5222)
vulnerability in rust (ALPINE-CVE-2026-5222). Confidential information can be exposed externally. Mitigation: upgrade to `1.91.1-r2` or later.
|
| ALPINE-CVE-2026-5223 |
|
Vulnerability in rust (ALPINE-CVE-2026-5223)
vulnerability in rust (ALPINE-CVE-2026-5223). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.91.1-r2` or later.
|
| DEBIAN-CVE-2026-5223 |
|
Vulnerability in cargo (DEBIAN-CVE-2026-5223)
vulnerability in cargo (DEBIAN-CVE-2026-5223). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.91.0-3` or later.
|
| DEBIAN-CVE-2026-5222 |
|
Vulnerability in cargo (DEBIAN-CVE-2026-5222)
vulnerability in cargo (DEBIAN-CVE-2026-5222). Confidential information can be exposed externally. Mitigation: upgrade to `0.91.0-3` or later.
|
| CVE-2026-5223 |
|
Vulnerability in cargo (CVE-2026-5223)
vulnerability in cargo (CVE-2026-5223). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.97.0` or later.
|
| CVE-2026-5222 |
|
Vulnerability in cargo (CVE-2026-5222)
vulnerability in cargo (CVE-2026-5222). Confidential information can be exposed externally. Exploitable via ``foo``. Mitigation: upgrade to `0.97.0` or later.
|
| GHSA-mw3r-368h-vrgv |
|
Vulnerability in auth-basic-vault (GHSA-mw3r-368h-vrgv)
vulnerability in auth-basic-vault (GHSA-mw3r-368h-vrgv). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4488 |
|
Vulnerability in auth-basic-vault (MAL-2026-4488)
vulnerability in auth-basic-vault (MAL-2026-4488). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-PYPI-CVE-2024-12797 |
|
Vulnerability in rootio-cryptography (ROOT-APP-PYPI-CVE-2024-12797)
vulnerability in rootio-cryptography (ROOT-APP-PYPI-CVE-2024-12797). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `43.0.1+root.io.2, 43.0.1+root.io.3` or later.
|
| MAL-2026-4823 |
|
Vulnerability in msc-terminal (MAL-2026-4823)
vulnerability in msc-terminal (MAL-2026-4823). Risk of unauthorized operations or information disclosure. Exploitable via ``nhpkevte1576``.
|
| GHSA-fx94-j779-7c6j |
|
Vulnerability in authcascade (GHSA-fx94-j779-7c6j)
vulnerability in authcascade (GHSA-fx94-j779-7c6j). Risk of unauthorized operations or information disclosure. Exploitable via ``pino``.
|
| MAL-2026-4491 |
|
Vulnerability in authcascade (MAL-2026-4491)
vulnerability in authcascade (MAL-2026-4491). Risk of unauthorized operations or information disclosure. Exploitable via ``pino``.
|
| MAL-2026-4419 |
|
Vulnerability in @pmate/utils (MAL-2026-4419)
vulnerability in @pmate/utils (MAL-2026-4419). Risk of unauthorized operations or information disclosure. Exploitable via ``AIzaSyB60IT_Mte2tZisNiBujfS_q9MPOnw6tgk``.
|
| ROOT-APP-MAVEN-CVE-2025-7962 |
|
Vulnerability in io.root.org.eclipse.angus:smtp (ROOT-APP-MAVEN-CVE-2025-7962)
vulnerability in io.root.org.eclipse.angus:smtp (ROOT-APP-MAVEN-CVE-2025-7962). Data can be tampered with by attackers. Mitigation: upgrade to `2.0.2-root.io.1, 2.0.3-root.io.4, 2.0.2-root.io.2, 2.0.3-root.io.5, 2.0.2-root.io.3` or later.
|
| DEBIAN-CVE-2026-47732 |
|
DEBIAN-CVE-2026-47732 |
| MAL-2026-4656 |
|
Vulnerability in raise-common-lib (MAL-2026-4656)
vulnerability in raise-common-lib (MAL-2026-4656). Risk of unauthorized operations or information disclosure.
|
| CLSA-2026-1779701895 |
|
Vulnerability in podman (CLSA-2026-1779701895)
vulnerability in podman (CLSA-2026-1779701895). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5:5.4.0-13.el9_6.tuxcare.els5` or later.
|
| CLSA-2026-1779371406 |
|
Vulnerability in vim-X11 (CLSA-2026-1779371406)
vulnerability in vim-X11 (CLSA-2026-1779371406). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.2.2637-22.el9_6.1.tuxcare.els29` or later.
|
| CLSA-2026-1779700361 |
|
Vulnerability in vim-X11 (CLSA-2026-1779700361)
vulnerability in vim-X11 (CLSA-2026-1779700361). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.2.2637-22.el9_2.1.tuxcare.els29` or later.
|
| MAL-2026-4511 |
|
Vulnerability in chai-as-patch (MAL-2026-4511)
vulnerability in chai-as-patch (MAL-2026-4511). Risk of unauthorized operations or information disclosure. Exploitable via ``require``.
|
| openSUSE-SU-2026:20792-1 |
|
Vulnerability in openSUSE-SU-2026:20792-1 (openSUSE-SU-2026:20792-1)
vulnerability in openSUSE-SU-2026:20792-1 (openSUSE-SU-2026:20792-1). Risk of unauthorized operations or information disclosure.
|
| GHSA-jp5r-76w9-2rvh |
|
Vulnerability in ts-stream-compose (GHSA-jp5r-76w9-2rvh)
vulnerability in ts-stream-compose (GHSA-jp5r-76w9-2rvh). Risk of unauthorized operations or information disclosure.
|
| GHSA-6pxr-857g-mr97 |
|
Vulnerability in jules-standard (GHSA-6pxr-857g-mr97)
vulnerability in jules-standard (GHSA-6pxr-857g-mr97). Risk of unauthorized operations or information disclosure.
|
| GHSA-59j3-wvx3-w9hx |
|
Vulnerability in @gbrlxvii/ts-env-validator (GHSA-59j3-wvx3-w9hx)
vulnerability in @gbrlxvii/ts-env-validator (GHSA-59j3-wvx3-w9hx). Risk of unauthorized operations or information disclosure.
|
| GHSA-66j8-7w8q-vvf5 |
|
Vulnerability in ts-result-pipe (GHSA-66j8-7w8q-vvf5)
vulnerability in ts-result-pipe (GHSA-66j8-7w8q-vvf5). Risk of unauthorized operations or information disclosure.
|
| GHSA-xqpr-hv2v-6pfj |
|
Vulnerability in ts-typeguard-utils (GHSA-xqpr-hv2v-6pfj)
vulnerability in ts-typeguard-utils (GHSA-xqpr-hv2v-6pfj). Risk of unauthorized operations or information disclosure.
|
| GHSA-vxrv-934h-xj6q |
|
Vulnerability in ts-schema-config (GHSA-vxrv-934h-xj6q)
vulnerability in ts-schema-config (GHSA-vxrv-934h-xj6q). Risk of unauthorized operations or information disclosure.
|
| GHSA-f6hr-rvf9-ch6p |
|
Vulnerability in ts-iter-utils (GHSA-f6hr-rvf9-ch6p)
vulnerability in ts-iter-utils (GHSA-f6hr-rvf9-ch6p). Risk of unauthorized operations or information disclosure.
|
| GHSA-qgfv-9wmq-m4f7 |
|
Vulnerability in ts-config-mapper (GHSA-qgfv-9wmq-m4f7)
vulnerability in ts-config-mapper (GHSA-qgfv-9wmq-m4f7). Risk of unauthorized operations or information disclosure.
|
| openSUSE-SU-2026:20794-1 |
|
Vulnerability in openSUSE-SU-2026:20794-1 (openSUSE-SU-2026:20794-1)
vulnerability in openSUSE-SU-2026:20794-1 (openSUSE-SU-2026:20794-1). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-MAVEN-CVE-2024-38827 |
|
Vulnerability in io.root.org.springframework.security:spring-security-core (ROOT-APP-MAVEN-CVE-2024-38827)
vulnerability in io.root.org.springframework.security:spring-security-core (ROOT-APP-MAVEN-CVE-2024-38827). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.3.3-root.io.1, 5.7.1-root.io.1, 5.7.1-root.io.2, 6.3.3-root.io.1781448405, 6.3.3-root.io.1781450697` or later.
|
| ROOT-APP-MAVEN-CVE-2026-22748 |
|
Vulnerability in io.root.org.springframework.security:spring-security-oauth2-jose (ROOT-APP-MAVEN-CVE-2026-22748)
vulnerability in io.root.org.springframework.security:spring-security-oauth2-jose (ROOT-APP-MAVEN-CVE-2026-22748). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.3.3-root.io.1, 6.5.9-root.io.1, 6.3.3-root.io.1781448405, 6.3.3-root.io.1781450697` or later.
|
| ROOT-APP-MAVEN-CVE-2026-22732 |
|
Vulnerability in io.root.org.springframework.security:spring-security-web (ROOT-APP-MAVEN-CVE-2026-22732)
vulnerability in io.root.org.springframework.security:spring-security-web (ROOT-APP-MAVEN-CVE-2026-22732). Confidential information can be exposed externally. Mitigation: upgrade to `6.3.3-root.io.1, 6.3.3-root.io.1781448405, 6.3.3-root.io.1781450697` or later.
|
| GHSA-qcrh-87jf-mm39 |
|
Vulnerability in internallib_v95 (GHSA-qcrh-87jf-mm39)
vulnerability in internallib_v95 (GHSA-qcrh-87jf-mm39). Risk of unauthorized operations or information disclosure.
|