Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
ROOT-APP-PYPI-CVE-2025-64459 Vulnerability in rootio-django (ROOT-APP-PYPI-CVE-2025-64459)
vulnerability in rootio-django (ROOT-APP-PYPI-CVE-2025-64459). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.13+root.io.1, 4.1.13+root.io.2, 3.2.25+root.io.1, 2.2.28+root.io.1, 4.1.13+root.io.3, 2.2.28+root.io.2, 3.2.25+root.io.2, 2.2.28+root.io.3, 3.2.25+root.io.3, 4.1.13+root.io.4` or later.
MAL-2026-4754 Vulnerability in heims (MAL-2026-4754)
vulnerability in heims (MAL-2026-4754). Risk of unauthorized operations or information disclosure.
ROOT-OS-DEBIAN-12-CVE-2026-43495 Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43495)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43495). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
ROOT-OS-DEBIAN-12-CVE-2026-43502 Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43502)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43502). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
ROOT-OS-DEBIAN-12-CVE-2026-43494 Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43494)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43494). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
ROOT-OS-DEBIAN-12-CVE-2026-43490 Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43490)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43490). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
ROOT-OS-DEBIAN-12-CVE-2026-43501 Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43501)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43501). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
ROOT-OS-DEBIAN-12-CVE-2026-43497 Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43497)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43497). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
ROOT-OS-DEBIAN-12-CVE-2026-43499 Vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43499)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-12-CVE-2026-43499). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.1.174-1.root.io.138, 6.1.174-1.root.io.139, 6.1.174-1.root.io.140, 6.1.174-1.root.io.141, 6.1.174-1.root.io.142, 6.1.174-1.root.io.143, 6.1.174-1.root.io.145, 6.1.174-1.root.io.144` or later.
ROOT-OS-DEBIAN-11-CVE-2026-43494 Vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43494)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43494). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.10.257-1.root.io.92, 5.10.257-1.root.io.93, 5.10.257-1.root.io.94, 5.10.257-1.root.io.95, 5.10.257-1.root.io.96, 5.10.257-1.root.io.97, 5.10.257-1.root.io.98, 5.10.257-1.root.io.99` or later.
ROOT-OS-DEBIAN-11-CVE-2026-43499 Vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43499)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43499). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.10.257-1.root.io.92, 5.10.257-1.root.io.93, 5.10.257-1.root.io.94, 5.10.257-1.root.io.95, 5.10.257-1.root.io.96, 5.10.257-1.root.io.97, 5.10.257-1.root.io.98, 5.10.257-1.root.io.99` or later.
ROOT-OS-DEBIAN-11-CVE-2026-43501 Vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43501)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43501). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.10.257-1.root.io.92, 5.10.257-1.root.io.93, 5.10.257-1.root.io.94, 5.10.257-1.root.io.95, 5.10.257-1.root.io.96, 5.10.257-1.root.io.97, 5.10.257-1.root.io.98, 5.10.257-1.root.io.99` or later.
ROOT-OS-DEBIAN-11-CVE-2026-43497 Vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43497)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43497). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.10.257-1.root.io.92, 5.10.257-1.root.io.93, 5.10.257-1.root.io.94, 5.10.257-1.root.io.95, 5.10.257-1.root.io.96, 5.10.257-1.root.io.97, 5.10.257-1.root.io.98, 5.10.257-1.root.io.99` or later.
ROOT-OS-DEBIAN-11-CVE-2026-43502 Vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43502)
vulnerability in rootio-linux (ROOT-OS-DEBIAN-11-CVE-2026-43502). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.10.257-1.root.io.92, 5.10.257-1.root.io.93, 5.10.257-1.root.io.94, 5.10.257-1.root.io.95, 5.10.257-1.root.io.96, 5.10.257-1.root.io.97, 5.10.257-1.root.io.98, 5.10.257-1.root.io.99` or later.
MAL-2026-4423 Vulnerability in @refactco/refact-os (MAL-2026-4423)
vulnerability in @refactco/refact-os (MAL-2026-4423). Risk of unauthorized operations or information disclosure. Exploitable via ``beforeSubmitPrompt``.
MAL-2026-4679 Vulnerability in system-user-identifier-cli (MAL-2026-4679)
vulnerability in system-user-identifier-cli (MAL-2026-4679). Risk of unauthorized operations or information disclosure.
MINI-6qxx-hchw-c4ph MINI-6qxx-hchw-c4ph
CVE-2026-23667 Vulnerability in jvn (CVE-2026-23667)
vulnerability in jvn (CVE-2026-23667). Risk of unauthorized operations or information disclosure.
MAL-2026-4737 Vulnerability in your-unique-package-name1 (MAL-2026-4737)
vulnerability in your-unique-package-name1 (MAL-2026-4737). Risk of unauthorized operations or information disclosure.
MAL-2026-4623 Vulnerability in npm-builderio-qwik-poc (MAL-2026-4623)
vulnerability in npm-builderio-qwik-poc (MAL-2026-4623). Risk of unauthorized operations or information disclosure. Exploitable via ``index.js``.
MAL-2026-4291 Vulnerability in pylogkt (MAL-2026-4291)
vulnerability in pylogkt (MAL-2026-4291). Risk of unauthorized operations or information disclosure.
MAL-2026-4473 Vulnerability in @zizie071/libsignal-node (MAL-2026-4473)
vulnerability in @zizie071/libsignal-node (MAL-2026-4473). Risk of unauthorized operations or information disclosure.
OSV-2026-808 Vulnerability in libhevc (OSV-2026-808)
vulnerability in libhevc (OSV-2026-808). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `cdd7c565e0264d6555a2aea73a70b0a929508b2a` or later.
openSUSE-SU-2026:10859-1 Vulnerability in kernel-source (openSUSE-SU-2026:10859-1)
vulnerability in kernel-source (openSUSE-SU-2026:10859-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.10-1.1` or later.
DEBIAN-CVE-2026-48832 action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability.
DEBIAN-CVE-2026-48831 Vulnerability in wine (DEBIAN-CVE-2026-48831)
vulnerability in wine (DEBIAN-CVE-2026-48831). Risk of unauthorized operations or information disclosure.
MAL-2026-4288 Vulnerability in @jaggle/resizeobserves (MAL-2026-4288)
vulnerability in @jaggle/resizeobserves (MAL-2026-4288). Risk of unauthorized operations or information disclosure. Exploitable via ``com.apple.python.runtime.plist``.
MAL-2026-4289 Vulnerability in @stockrepublic/republic-components (MAL-2026-4289)
vulnerability in @stockrepublic/republic-components (MAL-2026-4289). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
MAL-2026-4290 Vulnerability in clipboard-guardian (MAL-2026-4290)
vulnerability in clipboard-guardian (MAL-2026-4290). Risk of unauthorized operations or information disclosure. Exploitable via ``com.apple.python.runtime.plist``.
MAL-2026-4669 Vulnerability in shiroai (MAL-2026-4669)
vulnerability in shiroai (MAL-2026-4669). Risk of unauthorized operations or information disclosure. Exploitable via ``getProjectContext``.
MAL-2026-4547 Vulnerability in cxpher-linux-arm32 (MAL-2026-4547)
vulnerability in cxpher-linux-arm32 (MAL-2026-4547). Risk of unauthorized operations or information disclosure. Exploitable via ``main``.
MAL-2026-4285 Vulnerability in polydata-analytics (MAL-2026-4285)
vulnerability in polydata-analytics (MAL-2026-4285). Risk of unauthorized operations or information disclosure.
MAL-2026-4286 Vulnerability in polymarket-data-fetcher (MAL-2026-4286)
vulnerability in polymarket-data-fetcher (MAL-2026-4286). Risk of unauthorized operations or information disclosure.
MAL-2026-4678 Vulnerability in sysnode (MAL-2026-4678)
vulnerability in sysnode (MAL-2026-4678). Risk of unauthorized operations or information disclosure. Exploitable via ``keyboard``.
MAL-2026-4521 Vulnerability in class-weaver (MAL-2026-4521)
vulnerability in class-weaver (MAL-2026-4521). Risk of unauthorized operations or information disclosure.
MAL-2026-4706 Vulnerability in vite-plugin-css-blend (MAL-2026-4706)
vulnerability in vite-plugin-css-blend (MAL-2026-4706). Risk of unauthorized operations or information disclosure. Exploitable via ``accents``.
MAL-2026-4776 Vulnerability in whatsfly-labfox (MAL-2026-4776)
vulnerability in whatsfly-labfox (MAL-2026-4776). Risk of unauthorized operations or information disclosure. Exploitable via ``whatsmeow.py``.
MAL-2026-4520 Vulnerability in class-blend (MAL-2026-4520)
vulnerability in class-blend (MAL-2026-4520). Risk of unauthorized operations or information disclosure.
GHSA-jwfr-3hmj-4r72 Vulnerability in power-platform-playwright-toolkit (GHSA-jwfr-3hmj-4r72)
vulnerability in power-platform-playwright-toolkit (GHSA-jwfr-3hmj-4r72). Risk of unauthorized operations or information disclosure. Exploitable via ``microsft``.
MAL-2026-4644 Vulnerability in power-platform-playwright-toolkit (MAL-2026-4644)
vulnerability in power-platform-playwright-toolkit (MAL-2026-4644). Risk of unauthorized operations or information disclosure. Exploitable via ``microsft``.
MAL-2026-4504 Vulnerability in cami-design (MAL-2026-4504)
vulnerability in cami-design (MAL-2026-4504). Risk of unauthorized operations or information disclosure.
MAL-2026-4660 Vulnerability in react-malicious-clone (MAL-2026-4660)
vulnerability in react-malicious-clone (MAL-2026-4660). Risk of unauthorized operations or information disclosure.
ROOT-OS-DEBIAN-12-CVE-2023-49463 Vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2023-49463)
vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2023-49463). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.15.1-1+deb12u1.root.io.6, 1.15.1-1+deb12u1.root.io.7, 1.15.1-1+deb12u1.root.io.8, 1.15.1-1+deb12u1.root.io.9, 1.15.1-1+deb12u1.root.io.3, 1.15.1-1+deb12u1.root.io.4, 1.15.1-1+deb12u1.root.io.2, 1.15.1-1+deb12u1.root.io.5` or later.
ROOT-OS-DEBIAN-12-CVE-2025-68431 Vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2025-68431)
vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2025-68431). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.15.1-1+deb12u1.root.io.6, 1.15.1-1+deb12u1.root.io.7, 1.15.1-1+deb12u1.root.io.8, 1.15.1-1+deb12u1.root.io.9, 1.15.1-1+deb12u1.root.io.5` or later.
ROOT-OS-DEBIAN-12-CVE-2026-32741 Vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2026-32741)
vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2026-32741). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.15.1-1+deb12u1.root.io.6, 1.15.1-1+deb12u1.root.io.7, 1.15.1-1+deb12u1.root.io.8, 1.15.1-1+deb12u1.root.io.9` or later.
MAL-2026-4274 Vulnerability in power-apps (MAL-2026-4274)
vulnerability in power-apps (MAL-2026-4274). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
ECHO-5523-aad4-d06d ECHO-5523-aad4-d06d
ECHO-07bd-5728-1ad8 ECHO-07bd-5728-1ad8
ECHO-0435-d140-fc4a ECHO-0435-d140-fc4a
ECHO-dfb6-9966-93ab ECHO-dfb6-9966-93ab

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →