Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| ROOT-APP-PYPI-CVE-2025-64459 |
|
Vulnerability in rootio-django (ROOT-APP-PYPI-CVE-2025-64459)
vulnerability in rootio-django (ROOT-APP-PYPI-CVE-2025-64459). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.13+root.io.1, 4.1.13+root.io.2, 3.2.25+root.io.1, 2.2.28+root.io.1, 4.1.13+root.io.3, 2.2.28+root.io.2, 3.2.25+root.io.2, 2.2.28+root.io.3, 3.2.25+root.io.3, 4.1.13+root.io.4` or later.
|
| MAL-2026-4754 |
|
Vulnerability in heims (MAL-2026-4754)
vulnerability in heims (MAL-2026-4754). Risk of unauthorized operations or information disclosure.
|
| ROOT-OS-DEBIAN-12-CVE-2026-43495 |
|
Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43495)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43495). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2026-43502 |
|
Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43502)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43502). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2026-43494 |
|
Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43494)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43494). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2026-43490 |
|
Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43490)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43490). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2026-43501 |
|
Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43501)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43501). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2026-43497 |
|
Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43497)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43497). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2026-43499 |
|
Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43499)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43499). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
|
| ROOT-OS-DEBIAN-11-CVE-2026-43494 |
|
Vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43494)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43494). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.10.257-1.root.io.92, 5.10.257-1.root.io.93, 5.10.257-1.root.io.94, 5.10.257-1.root.io.95, 5.10.257-1.root.io.96, 5.10.257-1.root.io.97, 5.10.257-1.root.io.98, 5.10.257-1.root.io.99` or later.
|
| ROOT-OS-DEBIAN-11-CVE-2026-43499 |
|
Vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43499)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43499). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.10.257-1.root.io.92, 5.10.257-1.root.io.93, 5.10.257-1.root.io.94, 5.10.257-1.root.io.95, 5.10.257-1.root.io.96, 5.10.257-1.root.io.97, 5.10.257-1.root.io.98, 5.10.257-1.root.io.99` or later.
|
| ROOT-OS-DEBIAN-11-CVE-2026-43501 |
|
Vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43501)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43501). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.10.257-1.root.io.92, 5.10.257-1.root.io.93, 5.10.257-1.root.io.94, 5.10.257-1.root.io.95, 5.10.257-1.root.io.96, 5.10.257-1.root.io.97, 5.10.257-1.root.io.98, 5.10.257-1.root.io.99` or later.
|
| ROOT-OS-DEBIAN-11-CVE-2026-43497 |
|
Vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43497)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43497). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.10.257-1.root.io.92, 5.10.257-1.root.io.93, 5.10.257-1.root.io.94, 5.10.257-1.root.io.95, 5.10.257-1.root.io.96, 5.10.257-1.root.io.97, 5.10.257-1.root.io.98, 5.10.257-1.root.io.99` or later.
|
| ROOT-OS-DEBIAN-11-CVE-2026-43502 |
|
Vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43502)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43502). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.10.257-1.root.io.92, 5.10.257-1.root.io.93, 5.10.257-1.root.io.94, 5.10.257-1.root.io.95, 5.10.257-1.root.io.96, 5.10.257-1.root.io.97, 5.10.257-1.root.io.98, 5.10.257-1.root.io.99` or later.
|
| MAL-2026-4423 |
|
Vulnerability in @refactco/refact-os (MAL-2026-4423)
vulnerability in @refactco/refact-os (MAL-2026-4423). Risk of unauthorized operations or information disclosure. Exploitable via ``beforeSubmitPrompt``.
|
| MAL-2026-4679 |
|
Vulnerability in system-user-identifier-cli (MAL-2026-4679)
vulnerability in system-user-identifier-cli (MAL-2026-4679). Risk of unauthorized operations or information disclosure.
|
| MINI-6qxx-hchw-c4ph |
|
MINI-6qxx-hchw-c4ph |
| CVE-2026-23667 |
|
Vulnerability in jvn (CVE-2026-23667)
vulnerability in jvn (CVE-2026-23667). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4737 |
|
Vulnerability in your-unique-package-name1 (MAL-2026-4737)
vulnerability in your-unique-package-name1 (MAL-2026-4737). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4623 |
|
Vulnerability in npm-builderio-qwik-poc (MAL-2026-4623)
vulnerability in npm-builderio-qwik-poc (MAL-2026-4623). Risk of unauthorized operations or information disclosure. Exploitable via ``index.js``.
|
| MAL-2026-4291 |
|
Vulnerability in pylogkt (MAL-2026-4291)
vulnerability in pylogkt (MAL-2026-4291). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4473 |
|
Vulnerability in @zizie071/libsignal-node (MAL-2026-4473)
vulnerability in @zizie071/libsignal-node (MAL-2026-4473). Risk of unauthorized operations or information disclosure.
|
| OSV-2026-808 |
|
Vulnerability in libhevc (OSV-2026-808)
vulnerability in libhevc (OSV-2026-808). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `cdd7c565e0264d6555a2aea73a70b0a929508b2a` or later.
|
| openSUSE-SU-2026:10859-1 |
|
Vulnerability in kernel-source (openSUSE-SU-2026:10859-1)
vulnerability in kernel-source (openSUSE-SU-2026:10859-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.10-1.1` or later.
|
| DEBIAN-CVE-2026-48832 |
|
action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability. |
| DEBIAN-CVE-2026-48831 |
|
Vulnerability in wine (DEBIAN-CVE-2026-48831)
vulnerability in wine (DEBIAN-CVE-2026-48831). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4288 |
|
Vulnerability in @jaggle/resizeobserves (MAL-2026-4288)
vulnerability in @jaggle/resizeobserves (MAL-2026-4288). Risk of unauthorized operations or information disclosure. Exploitable via ``com.apple.python.runtime.plist``.
|
| MAL-2026-4289 |
|
Vulnerability in @stockrepublic/republic-components (MAL-2026-4289)
vulnerability in @stockrepublic/republic-components (MAL-2026-4289). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-4290 |
|
Vulnerability in clipboard-guardian (MAL-2026-4290)
vulnerability in clipboard-guardian (MAL-2026-4290). Risk of unauthorized operations or information disclosure. Exploitable via ``com.apple.python.runtime.plist``.
|
| MAL-2026-4669 |
|
Vulnerability in shiroai (MAL-2026-4669)
vulnerability in shiroai (MAL-2026-4669). Risk of unauthorized operations or information disclosure. Exploitable via ``getProjectContext``.
|
| MAL-2026-4547 |
|
Vulnerability in cxpher-linux-arm32 (MAL-2026-4547)
vulnerability in cxpher-linux-arm32 (MAL-2026-4547). Risk of unauthorized operations or information disclosure. Exploitable via ``main``.
|
| MAL-2026-4285 |
|
Vulnerability in polydata-analytics (MAL-2026-4285)
vulnerability in polydata-analytics (MAL-2026-4285). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4286 |
|
Vulnerability in polymarket-data-fetcher (MAL-2026-4286)
vulnerability in polymarket-data-fetcher (MAL-2026-4286). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4678 |
|
Vulnerability in sysnode (MAL-2026-4678)
vulnerability in sysnode (MAL-2026-4678). Risk of unauthorized operations or information disclosure. Exploitable via ``keyboard``.
|
| MAL-2026-4521 |
|
Vulnerability in class-weaver (MAL-2026-4521)
vulnerability in class-weaver (MAL-2026-4521). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4706 |
|
Vulnerability in vite-plugin-css-blend (MAL-2026-4706)
vulnerability in vite-plugin-css-blend (MAL-2026-4706). Risk of unauthorized operations or information disclosure. Exploitable via ``accents``.
|
| MAL-2026-4776 |
|
Vulnerability in whatsfly-labfox (MAL-2026-4776)
vulnerability in whatsfly-labfox (MAL-2026-4776). Risk of unauthorized operations or information disclosure. Exploitable via ``whatsmeow.py``.
|
| MAL-2026-4520 |
|
Vulnerability in class-blend (MAL-2026-4520)
vulnerability in class-blend (MAL-2026-4520). Risk of unauthorized operations or information disclosure.
|
| GHSA-jwfr-3hmj-4r72 |
|
Vulnerability in power-platform-playwright-toolkit (GHSA-jwfr-3hmj-4r72)
vulnerability in power-platform-playwright-toolkit (GHSA-jwfr-3hmj-4r72). Risk of unauthorized operations or information disclosure. Exploitable via ``microsft``.
|
| MAL-2026-4644 |
|
Vulnerability in power-platform-playwright-toolkit (MAL-2026-4644)
vulnerability in power-platform-playwright-toolkit (MAL-2026-4644). Risk of unauthorized operations or information disclosure. Exploitable via ``microsft``.
|
| MAL-2026-4504 |
|
Vulnerability in cami-design (MAL-2026-4504)
vulnerability in cami-design (MAL-2026-4504). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4660 |
|
Vulnerability in react-malicious-clone (MAL-2026-4660)
vulnerability in react-malicious-clone (MAL-2026-4660). Risk of unauthorized operations or information disclosure.
|
| ROOT-OS-DEBIAN-12-CVE-2023-49463 |
|
Vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2023-49463)
vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2023-49463). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.15.1-1+deb12u1.root.io.6, 1.15.1-1+deb12u1.root.io.7, 1.15.1-1+deb12u1.root.io.8, 1.15.1-1+deb12u1.root.io.9, 1.15.1-1+deb12u1.root.io.3, 1.15.1-1+deb12u1.root.io.4, 1.15.1-1+deb12u1.root.io.2, 1.15.1-1+deb12u1.root.io.5` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2025-68431 |
|
Vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2025-68431)
vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2025-68431). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.15.1-1+deb12u1.root.io.6, 1.15.1-1+deb12u1.root.io.7, 1.15.1-1+deb12u1.root.io.8, 1.15.1-1+deb12u1.root.io.9, 1.15.1-1+deb12u1.root.io.5` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2026-32741 |
|
Vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2026-32741)
vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2026-32741). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.15.1-1+deb12u1.root.io.6, 1.15.1-1+deb12u1.root.io.7, 1.15.1-1+deb12u1.root.io.8, 1.15.1-1+deb12u1.root.io.9` or later.
|
| MAL-2026-4274 |
|
Vulnerability in power-apps (MAL-2026-4274)
vulnerability in power-apps (MAL-2026-4274). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
|
| ECHO-5523-aad4-d06d |
|
ECHO-5523-aad4-d06d |
| ECHO-07bd-5728-1ad8 |
|
ECHO-07bd-5728-1ad8 |
| ECHO-0435-d140-fc4a |
|
ECHO-0435-d140-fc4a |
| ECHO-dfb6-9966-93ab |
|
ECHO-dfb6-9966-93ab |