Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| BELL-CVE-2026-41567 |
|
BELL-CVE-2026-41567 |
| CVE-2026-4224 |
|
Vulnerability in libpython (CVE-2026-4224)
vulnerability in libpython (CVE-2026-4224). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.13.13, 3.14.4` or later.
|
| ROOT-OS-UBUNTU-2404-CVE-2026-27456 |
|
Vulnerability in rootio-util-linux (ROOT-OS-UBUNTU-2404-CVE-2026-27456)
vulnerability in rootio-util-linux (ROOT-OS-UBUNTU-2404-CVE-2026-27456). Confidential information can be exposed externally. Mitigation: upgrade to `2.39.3-9ubuntu6.5.root.io.1` or later.
|
| MAL-2026-4682 |
|
Vulnerability in tango-app-api-trax (MAL-2026-4682)
vulnerability in tango-app-api-trax (MAL-2026-4682). Risk of unauthorized operations or information disclosure. Exploitable via ``tango.eye``.
|
| ROOT-APP-GOBINARY-CVE-2026-32287 |
|
Vulnerability in rootio-github.com/antchfx/xpath (ROOT-APP-GOBINARY-CVE-2026-32287)
vulnerability in rootio-github.com/antchfx/xpath (ROOT-APP-GOBINARY-CVE-2026-32287). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v1.3.5-root.io.1, v1.3.5-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2026-1225 |
|
Vulnerability in io.root.ch.qos.logback:logback-core (ROOT-APP-MAVEN-CVE-2026-1225)
vulnerability in io.root.ch.qos.logback:logback-core (ROOT-APP-MAVEN-CVE-2026-1225). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.5-root.io.1, 1.2.9-root.io.1, 1.2.10-root.io.1, 1.5.18-root.io.2, 1.5.18-root.io.143438, 1.4.11-root.io.5, 1.1.3-root.io.2` or later.
|
| ROOT-APP-GOBINARY-CVE-2026-33218 |
|
Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33218)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33218). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v2.12.3-root.io.1, v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
|
| ROOT-APP-GOBINARY-CVE-2026-29785 |
|
Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-29785)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-29785). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v2.12.3-root.io.1, v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
|
| ROOT-APP-GOBINARY-CVE-2026-33247 |
|
Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33247)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33247). Confidential information can be exposed externally. Mitigation: upgrade to `v2.12.3-root.io.1, v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
|
| ROOT-APP-GOBINARY-CVE-2026-33217 |
|
Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33217)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33217). Data can be tampered with by attackers. Mitigation: upgrade to `v2.12.3-root.io.1, v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
|
| ROOT-APP-GOBINARY-CVE-2026-33216 |
|
Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33216)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33216). Confidential information can be exposed externally. Mitigation: upgrade to `v2.12.3-root.io.1, v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
|
| ROOT-APP-GOBINARY-CVE-2026-27889 |
|
Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-27889)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-27889). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v2.12.3-root.io.1, v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
|
| MAL-2026-4498 |
|
Vulnerability in bitrix24-tasks-mcp-server (MAL-2026-4498)
vulnerability in bitrix24-tasks-mcp-server (MAL-2026-4498). Risk of unauthorized operations or information disclosure. Exploitable via ``bitrix24_attach_files_to_task``.
|
| ECHO-61da-f889-9d2c |
|
ECHO-61da-f889-9d2c |
| ROOT-APP-NPM-CVE-2025-68154 |
|
Vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2025-68154)
vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2025-68154). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.23.8-root.io.5, 5.23.8-root.io.1, 5.23.8-root.io.2, 5.23.8-root.io.3, 5.23.8-root.io.4` or later.
|
| ROOT-APP-NPM-CVE-2026-44724 |
|
Vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2026-44724)
vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2026-44724). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.23.8-root.io.5, 5.23.8-root.io.4` or later.
|
| ROOT-APP-NPM-CVE-2026-26318 |
|
Vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2026-26318)
vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2026-26318). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.23.8-root.io.5, 5.23.8-root.io.2, 5.23.8-root.io.3, 5.23.8-root.io.4` or later.
|
| ROOT-APP-NPM-CVE-2026-26280 |
|
Vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2026-26280)
vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2026-26280). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.23.8-root.io.5, 5.23.8-root.io.3, 5.23.8-root.io.4` or later.
|
| ROOT-APP-NPM-CVE-2026-25128 |
|
Vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-25128)
vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-25128). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.1-root.io.1, 4.4.1-root.io.2, 4.4.1-root.io.3, 4.4.1-root.io.4, 4.4.1-root.io.5, 4.4.1-root.io.6, 4.4.1-root.io.7, 4.4.1-root.io.8, 5.2.5-root.io.3, 5.2.5-root.io.4` or later.
|
| ROOT-APP-NPM-CVE-2026-27942 |
|
Vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-27942)
vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-27942). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.3.4-root.io.3, 4.4.1-root.io.4, 5.3.4-root.io.4, 5.3.6-root.io.2, 4.4.1-root.io.5, 4.4.1-root.io.6, 4.4.1-root.io.7, 5.3.4-root.io.5, 5.3.6-root.io.3, 5.2.5-root.io.2, 4.4.1-root.io.8, 5.2.5-root.io.3, 5.3.4-root.io.6, 5.3.6-root.io.4, 4.4.1-root.io.9, 5.2.5-root.io.4, 5.3.4-root.io.7, 5.3.6-root.io.5, 5.3.4-root.io.8, 5.3.6-root.io.6, 4.5.4-root.io.1` or later.
|
| ROOT-APP-NPM-CVE-2026-33036 |
|
Vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-33036)
vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-33036). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.3.6-root.io.1, 5.3.4-root.io.4, 5.3.6-root.io.2, 4.4.1-root.io.5, 4.4.1-root.io.6, 4.4.1-root.io.7, 5.3.4-root.io.5, 5.3.6-root.io.3, 5.2.5-root.io.1, 4.4.1-root.io.8, 5.2.5-root.io.3, 5.3.4-root.io.6, 5.3.6-root.io.4, 4.4.1-root.io.9, 5.2.5-root.io.4, 5.3.4-root.io.7, 5.3.6-root.io.5, 5.3.4-root.io.8, 5.3.6-root.io.6` or later.
|
| ROOT-APP-NPM-CVE-2026-33349 |
|
Vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-33349)
vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-33349). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.1-root.io.7, 5.3.4-root.io.5, 5.3.6-root.io.3, 4.4.1-root.io.8, 5.2.5-root.io.3, 5.3.4-root.io.6, 5.3.6-root.io.4, 4.4.1-root.io.9, 5.2.5-root.io.4, 5.3.4-root.io.7, 5.3.6-root.io.5, 5.3.4-root.io.8, 5.3.6-root.io.6, 4.5.4-root.io.1` or later.
|
| ROOT-APP-NPM-CVE-2026-26278 |
|
Vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-26278)
vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-26278). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.3.4-root.io.1, 5.3.4-root.io.2, 5.3.4-root.io.3, 4.4.1-root.io.3, 4.4.1-root.io.4, 5.3.4-root.io.4, 4.4.1-root.io.5, 4.4.1-root.io.6, 4.4.1-root.io.7, 5.3.4-root.io.5, 5.2.5-root.io.2, 4.4.1-root.io.8, 5.2.5-root.io.3, 5.3.4-root.io.6, 4.4.1-root.io.9, 5.2.5-root.io.4, 5.3.4-root.io.7, 5.3.4-root.io.8` or later.
|
| ROOT-APP-NPM-CVE-2026-25896 |
|
Vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-25896)
vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-25896). Data can be tampered with by attackers. Mitigation: upgrade to `5.3.4-root.io.2, 4.4.1-root.io.2, 5.3.4-root.io.3, 4.4.1-root.io.3, 4.4.1-root.io.4, 5.3.4-root.io.4, 4.4.1-root.io.5, 4.4.1-root.io.6, 4.4.1-root.io.7, 5.3.4-root.io.5, 5.2.5-root.io.2, 4.4.1-root.io.8, 5.2.5-root.io.3, 5.3.4-root.io.6, 4.4.1-root.io.9, 5.2.5-root.io.4, 5.3.4-root.io.7, 5.3.4-root.io.8` or later.
|
| ROOT-APP-NPM-CVE-2026-41650 |
|
Vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-41650)
vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-41650). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.1-root.io.8, 5.2.5-root.io.3, 5.5.9-root.io.1, 5.3.4-root.io.6, 5.5.8-root.io.1, 5.3.6-root.io.4, 4.4.1-root.io.9, 5.2.5-root.io.4, 5.3.4-root.io.7, 5.5.9-root.io.2, 5.5.8-root.io.2, 5.3.6-root.io.5, 5.3.4-root.io.8, 5.3.6-root.io.6, 5.6.0-root.io.1, 3.21.1-root.io.1, 4.5.4-root.io.1` or later.
|
| ROOT-APP-GOBINARY-CVE-2025-10543 |
|
Vulnerability in rootio-github.com/eclipse/paho.mqtt.golang (ROOT-APP-GOBINARY-CVE-2025-10543)
vulnerability in rootio-github.com/eclipse/paho.mqtt.golang (ROOT-APP-GOBINARY-CVE-2025-10543). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v1.5.0-root.io.1, v1.5.0-root.io.2` or later.
|
| SUSE-SU-2026:21737-1 |
|
Vulnerability in SUSE-SU-2026:21737-1 (SUSE-SU-2026:21737-1)
vulnerability in SUSE-SU-2026:21737-1 (SUSE-SU-2026:21737-1). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4447 |
|
Vulnerability in @spcsn/taro-cli (MAL-2026-4447)
vulnerability in @spcsn/taro-cli (MAL-2026-4447). Risk of unauthorized operations or information disclosure. Exploitable via ``taro``.
|
| ROOT-APP-PYPI-CVE-2025-54121 |
|
Vulnerability in rootio-starlette (ROOT-APP-PYPI-CVE-2025-54121)
vulnerability in rootio-starlette (ROOT-APP-PYPI-CVE-2025-54121). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.22.0+root.io.1, 0.47.0+root.io.2, 0.46.2+root.io.2, 0.45.3+root.io.2, 0.45.3+root.io.3, 0.22.0+root.io.2, 0.47.0+root.io.3, 0.22.0+root.io.3, 0.46.2+root.io.3, 0.46.2+root.io.4, 0.22.0+aikido.4, 0.45.3+aikido.12, 0.46.2+aikido.5, 0.47.0+aikido.4` or later.
|
| ROOT-APP-PYPI-CVE-2025-62727 |
|
Vulnerability in rootio-starlette (ROOT-APP-PYPI-CVE-2025-62727)
vulnerability in rootio-starlette (ROOT-APP-PYPI-CVE-2025-62727). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.36.3+root.io.2, 0.45.2+root.io.1, 0.47.3+root.io.1, 0.46.2+root.io.1, 0.42.0+root.io.1, 0.41.2+root.io.1, 0.41.3+root.io.1, 0.47.1+root.io.1, 0.48.0+root.io.1, 0.47.2+root.io.1, 0.46.1+root.io.1, 0.45.3+root.io.1, 0.46.0+root.io.1, 0.47.0+root.io.1, 0.47.0+root.io.2, 0.46.2+root.io.2, 0.45.3+root.io.2, 0.45.3+root.io.3, 0.47.0+root.io.3, 0.45.2+root.io.2, 0.46.0+root.io.2, 0.46.2+root.io.3, 0.46.1+root.io.2, 0.48.0+root.io.2, 0.36.3+root.io.3, 0.47.3+root.io.2, 0.47.2+root.io.2, 0.42.0+root.io.2, 0.47.1+root.io.2, 0.41.2+root.io.2, 0.41.3+root.io.2, 0.42.0+root.io.3, 0.41.3+root.io.3, 0.48.0+root.io.3, 0.47.2+root.io.3, 0.46.1+root.io.3, 0.46.2+root.io.4, 0.47.1+root.io.3, 0.47.3+root.io.3, 0.41.3+aikido.4, 0.42.0+aikido.4, 0.46.1+aikido.4, 0.47.2+aikido.4, 0.45.3+aikido.12, 0.46.0+aikido.3, 0.47.1+aikido.4, 0.47.3+aikido.4, 0.46.2+aikido.5, 0.47.0+aikido.4, 0.48.0+aikido.4, 0.45.2+aikido.3, 0.42.0+root.io.5, 0.49.0+root.io.3` or later.
|
| ROOT-APP-MAVEN-CVE-2022-29599 |
|
Vulnerability in io.root.org.apache.maven.shared:maven-shared-utils (ROOT-APP-MAVEN-CVE-2022-29599)
vulnerability in io.root.org.apache.maven.shared:maven-shared-utils (ROOT-APP-MAVEN-CVE-2022-29599). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.0-root.io.1, 3.1.0-root.io.2` or later.
|
| CLSA-2026-1779273835 |
|
Vulnerability in jq (CLSA-2026-1779273835)
vulnerability in jq (CLSA-2026-1779273835). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6-17.el9_6.2.tuxcare.els3` or later.
|
| MAL-2026-4736 |
|
Vulnerability in yessir-node (MAL-2026-4736)
vulnerability in yessir-node (MAL-2026-4736). Risk of unauthorized operations or information disclosure.
|
| CLSA-2026-1777976277 |
|
Vulnerability in redis (CLSA-2026-1777976277)
vulnerability in redis (CLSA-2026-1777976277). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5:5.0.14-1+deb10u5+tuxcare.els2` or later.
|
| CLSA-2026-1779272835 |
|
Vulnerability in gnutls (CLSA-2026-1779272835)
vulnerability in gnutls (CLSA-2026-1779272835). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.7.6-23.el9_2.tuxcare.4.els4` or later.
|
| ROOT-APP-PYPI-CVE-2025-57804 |
|
Vulnerability in rootio-h2 (ROOT-APP-PYPI-CVE-2025-57804)
vulnerability in rootio-h2 (ROOT-APP-PYPI-CVE-2025-57804). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.2.0+root.io.1, 4.1.0+root.io.1, 4.1.0+root.io.2, 4.2.0+root.io.2` or later.
|
| ALPINE-CVE-2026-44608 |
|
Vulnerability in unbound (ALPINE-CVE-2026-44608)
vulnerability in unbound (ALPINE-CVE-2026-44608). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.1-r0` or later.
|
| ALPINE-CVE-2026-44390 |
|
Vulnerability in unbound (ALPINE-CVE-2026-44390)
vulnerability in unbound (ALPINE-CVE-2026-44390). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.1-r0` or later.
|
| ALPINE-CVE-2026-42960 |
|
Vulnerability in unbound (ALPINE-CVE-2026-42960)
vulnerability in unbound (ALPINE-CVE-2026-42960). Data can be tampered with by attackers. Mitigation: upgrade to `1.25.1-r0` or later.
|
| DEBIAN-CVE-2026-9064 |
|
Vulnerability in 389-ds-base (DEBIAN-CVE-2026-9064)
vulnerability in 389-ds-base (DEBIAN-CVE-2026-9064). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9064 |
|
Vulnerability in dos (CVE-2026-9064)
vulnerability in dos (CVE-2026-9064). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6728 |
|
Information Disclosure in wordpress (CVE-2026-6728)
vulnerability in wordpress (CVE-2026-6728). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44933 |
|
Vulnerability in CVE-2026-44933 (CVE-2026-44933)
vulnerability in CVE-2026-44933 (CVE-2026-44933). Successful exploitation can lead to full system takeover. Exploitable via ``PluginScript``.
|
| CVE-2026-44608 |
|
Vulnerability in nlnetlabs (CVE-2026-44608)
vulnerability in nlnetlabs (CVE-2026-44608). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44390 |
|
Vulnerability in dos (CVE-2026-44390)
vulnerability in dos (CVE-2026-44390). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42960 |
|
Vulnerability in nlnetlabs (CVE-2026-42960)
vulnerability in nlnetlabs (CVE-2026-42960). Data can be tampered with by attackers.
|
| ALPINE-CVE-2026-42923 |
|
Vulnerability in unbound (ALPINE-CVE-2026-42923)
vulnerability in unbound (ALPINE-CVE-2026-42923). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.1-r0` or later.
|
| ALPINE-CVE-2026-41292 |
|
Vulnerability in unbound (ALPINE-CVE-2026-41292)
vulnerability in unbound (ALPINE-CVE-2026-41292). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.1-r0` or later.
|
| ALPINE-CVE-2026-42534 |
|
Vulnerability in unbound (ALPINE-CVE-2026-42534)
vulnerability in unbound (ALPINE-CVE-2026-42534). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.1-r0` or later.
|
| ALPINE-CVE-2026-42959 |
|
Vulnerability in unbound (ALPINE-CVE-2026-42959)
vulnerability in unbound (ALPINE-CVE-2026-42959). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.1-r0` or later.
|