Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
BELL-CVE-2026-41567 BELL-CVE-2026-41567
CVE-2026-4224 Vulnerability in libpython (CVE-2026-4224)
vulnerability in libpython (CVE-2026-4224). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.13.13, 3.14.4` or later.
ROOT-OS-UBUNTU-2404-CVE-2026-27456 Vulnerability in rootio-util-linux (ROOT-OS-UBUNTU-2404-CVE-2026-27456)
vulnerability in rootio-util-linux (ROOT-OS-UBUNTU-2404-CVE-2026-27456). Confidential information can be exposed externally. Mitigation: upgrade to `2.39.3-9ubuntu6.5.root.io.1` or later.
MAL-2026-4682 Vulnerability in tango-app-api-trax (MAL-2026-4682)
vulnerability in tango-app-api-trax (MAL-2026-4682). Risk of unauthorized operations or information disclosure. Exploitable via ``tango.eye``.
ROOT-APP-GOBINARY-CVE-2026-32287 Vulnerability in rootio-github.com/antchfx/xpath (ROOT-APP-GOBINARY-CVE-2026-32287)
vulnerability in rootio-github.com/antchfx/xpath (ROOT-APP-GOBINARY-CVE-2026-32287). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v1.3.5-root.io.1, v1.3.5-root.io.2` or later.
ROOT-APP-MAVEN-CVE-2026-1225 Vulnerability in io.root.ch.qos.logback:logback-core (ROOT-APP-MAVEN-CVE-2026-1225)
vulnerability in io.root.ch.qos.logback:logback-core (ROOT-APP-MAVEN-CVE-2026-1225). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.5-root.io.1, 1.2.9-root.io.1, 1.2.10-root.io.1, 1.5.18-root.io.2, 1.5.18-root.io.143438, 1.4.11-root.io.5, 1.1.3-root.io.2` or later.
ROOT-APP-GOBINARY-CVE-2026-33218 Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33218)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33218). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v2.12.3-root.io.1, v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
ROOT-APP-GOBINARY-CVE-2026-29785 Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-29785)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-29785). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v2.12.3-root.io.1, v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
ROOT-APP-GOBINARY-CVE-2026-33247 Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33247)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33247). Confidential information can be exposed externally. Mitigation: upgrade to `v2.12.3-root.io.1, v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
ROOT-APP-GOBINARY-CVE-2026-33217 Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33217)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33217). Data can be tampered with by attackers. Mitigation: upgrade to `v2.12.3-root.io.1, v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
ROOT-APP-GOBINARY-CVE-2026-33216 Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33216)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33216). Confidential information can be exposed externally. Mitigation: upgrade to `v2.12.3-root.io.1, v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
ROOT-APP-GOBINARY-CVE-2026-27889 Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-27889)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-27889). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v2.12.3-root.io.1, v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
MAL-2026-4498 Vulnerability in bitrix24-tasks-mcp-server (MAL-2026-4498)
vulnerability in bitrix24-tasks-mcp-server (MAL-2026-4498). Risk of unauthorized operations or information disclosure. Exploitable via ``bitrix24_attach_files_to_task``.
ECHO-61da-f889-9d2c ECHO-61da-f889-9d2c
ROOT-APP-NPM-CVE-2025-68154 Vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2025-68154)
vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2025-68154). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.23.8-root.io.5, 5.23.8-root.io.1, 5.23.8-root.io.2, 5.23.8-root.io.3, 5.23.8-root.io.4` or later.
ROOT-APP-NPM-CVE-2026-44724 Vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2026-44724)
vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2026-44724). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.23.8-root.io.5, 5.23.8-root.io.4` or later.
ROOT-APP-NPM-CVE-2026-26318 Vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2026-26318)
vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2026-26318). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.23.8-root.io.5, 5.23.8-root.io.2, 5.23.8-root.io.3, 5.23.8-root.io.4` or later.
ROOT-APP-NPM-CVE-2026-26280 Vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2026-26280)
vulnerability in @rootio/systeminformation (ROOT-APP-NPM-CVE-2026-26280). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.23.8-root.io.5, 5.23.8-root.io.3, 5.23.8-root.io.4` or later.
ROOT-APP-NPM-CVE-2026-25128 Vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-25128)
vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-25128). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.1-root.io.1, 4.4.1-root.io.2, 4.4.1-root.io.3, 4.4.1-root.io.4, 4.4.1-root.io.5, 4.4.1-root.io.6, 4.4.1-root.io.7, 4.4.1-root.io.8, 5.2.5-root.io.3, 5.2.5-root.io.4` or later.
ROOT-APP-NPM-CVE-2026-27942 Vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-27942)
vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-27942). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.3.4-root.io.3, 4.4.1-root.io.4, 5.3.4-root.io.4, 5.3.6-root.io.2, 4.4.1-root.io.5, 4.4.1-root.io.6, 4.4.1-root.io.7, 5.3.4-root.io.5, 5.3.6-root.io.3, 5.2.5-root.io.2, 4.4.1-root.io.8, 5.2.5-root.io.3, 5.3.4-root.io.6, 5.3.6-root.io.4, 4.4.1-root.io.9, 5.2.5-root.io.4, 5.3.4-root.io.7, 5.3.6-root.io.5, 5.3.4-root.io.8, 5.3.6-root.io.6, 4.5.4-root.io.1` or later.
ROOT-APP-NPM-CVE-2026-33036 Vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-33036)
vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-33036). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.3.6-root.io.1, 5.3.4-root.io.4, 5.3.6-root.io.2, 4.4.1-root.io.5, 4.4.1-root.io.6, 4.4.1-root.io.7, 5.3.4-root.io.5, 5.3.6-root.io.3, 5.2.5-root.io.1, 4.4.1-root.io.8, 5.2.5-root.io.3, 5.3.4-root.io.6, 5.3.6-root.io.4, 4.4.1-root.io.9, 5.2.5-root.io.4, 5.3.4-root.io.7, 5.3.6-root.io.5, 5.3.4-root.io.8, 5.3.6-root.io.6` or later.
ROOT-APP-NPM-CVE-2026-33349 Vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-33349)
vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-33349). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.1-root.io.7, 5.3.4-root.io.5, 5.3.6-root.io.3, 4.4.1-root.io.8, 5.2.5-root.io.3, 5.3.4-root.io.6, 5.3.6-root.io.4, 4.4.1-root.io.9, 5.2.5-root.io.4, 5.3.4-root.io.7, 5.3.6-root.io.5, 5.3.4-root.io.8, 5.3.6-root.io.6, 4.5.4-root.io.1` or later.
ROOT-APP-NPM-CVE-2026-26278 Vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-26278)
vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-26278). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.3.4-root.io.1, 5.3.4-root.io.2, 5.3.4-root.io.3, 4.4.1-root.io.3, 4.4.1-root.io.4, 5.3.4-root.io.4, 4.4.1-root.io.5, 4.4.1-root.io.6, 4.4.1-root.io.7, 5.3.4-root.io.5, 5.2.5-root.io.2, 4.4.1-root.io.8, 5.2.5-root.io.3, 5.3.4-root.io.6, 4.4.1-root.io.9, 5.2.5-root.io.4, 5.3.4-root.io.7, 5.3.4-root.io.8` or later.
ROOT-APP-NPM-CVE-2026-25896 Vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-25896)
vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-25896). Data can be tampered with by attackers. Mitigation: upgrade to `5.3.4-root.io.2, 4.4.1-root.io.2, 5.3.4-root.io.3, 4.4.1-root.io.3, 4.4.1-root.io.4, 5.3.4-root.io.4, 4.4.1-root.io.5, 4.4.1-root.io.6, 4.4.1-root.io.7, 5.3.4-root.io.5, 5.2.5-root.io.2, 4.4.1-root.io.8, 5.2.5-root.io.3, 5.3.4-root.io.6, 4.4.1-root.io.9, 5.2.5-root.io.4, 5.3.4-root.io.7, 5.3.4-root.io.8` or later.
ROOT-APP-NPM-CVE-2026-41650 Vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-41650)
vulnerability in @rootio/fast-xml-parser (ROOT-APP-NPM-CVE-2026-41650). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.1-root.io.8, 5.2.5-root.io.3, 5.5.9-root.io.1, 5.3.4-root.io.6, 5.5.8-root.io.1, 5.3.6-root.io.4, 4.4.1-root.io.9, 5.2.5-root.io.4, 5.3.4-root.io.7, 5.5.9-root.io.2, 5.5.8-root.io.2, 5.3.6-root.io.5, 5.3.4-root.io.8, 5.3.6-root.io.6, 5.6.0-root.io.1, 3.21.1-root.io.1, 4.5.4-root.io.1` or later.
ROOT-APP-GOBINARY-CVE-2025-10543 Vulnerability in rootio-github.com/eclipse/paho.mqtt.golang (ROOT-APP-GOBINARY-CVE-2025-10543)
vulnerability in rootio-github.com/eclipse/paho.mqtt.golang (ROOT-APP-GOBINARY-CVE-2025-10543). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v1.5.0-root.io.1, v1.5.0-root.io.2` or later.
SUSE-SU-2026:21737-1 Vulnerability in SUSE-SU-2026:21737-1 (SUSE-SU-2026:21737-1)
vulnerability in SUSE-SU-2026:21737-1 (SUSE-SU-2026:21737-1). Risk of unauthorized operations or information disclosure.
MAL-2026-4447 Vulnerability in @spcsn/taro-cli (MAL-2026-4447)
vulnerability in @spcsn/taro-cli (MAL-2026-4447). Risk of unauthorized operations or information disclosure. Exploitable via ``taro``.
ROOT-APP-PYPI-CVE-2025-54121 Vulnerability in rootio-starlette (ROOT-APP-PYPI-CVE-2025-54121)
vulnerability in rootio-starlette (ROOT-APP-PYPI-CVE-2025-54121). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.22.0+root.io.1, 0.47.0+root.io.2, 0.46.2+root.io.2, 0.45.3+root.io.2, 0.45.3+root.io.3, 0.22.0+root.io.2, 0.47.0+root.io.3, 0.22.0+root.io.3, 0.46.2+root.io.3, 0.46.2+root.io.4, 0.22.0+aikido.4, 0.45.3+aikido.12, 0.46.2+aikido.5, 0.47.0+aikido.4` or later.
ROOT-APP-PYPI-CVE-2025-62727 Vulnerability in rootio-starlette (ROOT-APP-PYPI-CVE-2025-62727)
vulnerability in rootio-starlette (ROOT-APP-PYPI-CVE-2025-62727). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.36.3+root.io.2, 0.45.2+root.io.1, 0.47.3+root.io.1, 0.46.2+root.io.1, 0.42.0+root.io.1, 0.41.2+root.io.1, 0.41.3+root.io.1, 0.47.1+root.io.1, 0.48.0+root.io.1, 0.47.2+root.io.1, 0.46.1+root.io.1, 0.45.3+root.io.1, 0.46.0+root.io.1, 0.47.0+root.io.1, 0.47.0+root.io.2, 0.46.2+root.io.2, 0.45.3+root.io.2, 0.45.3+root.io.3, 0.47.0+root.io.3, 0.45.2+root.io.2, 0.46.0+root.io.2, 0.46.2+root.io.3, 0.46.1+root.io.2, 0.48.0+root.io.2, 0.36.3+root.io.3, 0.47.3+root.io.2, 0.47.2+root.io.2, 0.42.0+root.io.2, 0.47.1+root.io.2, 0.41.2+root.io.2, 0.41.3+root.io.2, 0.42.0+root.io.3, 0.41.3+root.io.3, 0.48.0+root.io.3, 0.47.2+root.io.3, 0.46.1+root.io.3, 0.46.2+root.io.4, 0.47.1+root.io.3, 0.47.3+root.io.3, 0.41.3+aikido.4, 0.42.0+aikido.4, 0.46.1+aikido.4, 0.47.2+aikido.4, 0.45.3+aikido.12, 0.46.0+aikido.3, 0.47.1+aikido.4, 0.47.3+aikido.4, 0.46.2+aikido.5, 0.47.0+aikido.4, 0.48.0+aikido.4, 0.45.2+aikido.3, 0.42.0+root.io.5, 0.49.0+root.io.3` or later.
ROOT-APP-MAVEN-CVE-2022-29599 Vulnerability in io.root.org.apache.maven.shared:maven-shared-utils (ROOT-APP-MAVEN-CVE-2022-29599)
vulnerability in io.root.org.apache.maven.shared:maven-shared-utils (ROOT-APP-MAVEN-CVE-2022-29599). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.0-root.io.1, 3.1.0-root.io.2` or later.
CLSA-2026-1779273835 Vulnerability in jq (CLSA-2026-1779273835)
vulnerability in jq (CLSA-2026-1779273835). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6-17.el9_6.2.tuxcare.els3` or later.
MAL-2026-4736 Vulnerability in yessir-node (MAL-2026-4736)
vulnerability in yessir-node (MAL-2026-4736). Risk of unauthorized operations or information disclosure.
CLSA-2026-1777976277 Vulnerability in redis (CLSA-2026-1777976277)
vulnerability in redis (CLSA-2026-1777976277). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5:5.0.14-1+deb10u5+tuxcare.els2` or later.
CLSA-2026-1779272835 Vulnerability in gnutls (CLSA-2026-1779272835)
vulnerability in gnutls (CLSA-2026-1779272835). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.7.6-23.el9_2.tuxcare.4.els4` or later.
ROOT-APP-PYPI-CVE-2025-57804 Vulnerability in rootio-h2 (ROOT-APP-PYPI-CVE-2025-57804)
vulnerability in rootio-h2 (ROOT-APP-PYPI-CVE-2025-57804). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.2.0+root.io.1, 4.1.0+root.io.1, 4.1.0+root.io.2, 4.2.0+root.io.2` or later.
ALPINE-CVE-2026-44608 Vulnerability in unbound (ALPINE-CVE-2026-44608)
vulnerability in unbound (ALPINE-CVE-2026-44608). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.1-r0` or later.
ALPINE-CVE-2026-44390 Vulnerability in unbound (ALPINE-CVE-2026-44390)
vulnerability in unbound (ALPINE-CVE-2026-44390). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.1-r0` or later.
ALPINE-CVE-2026-42960 Vulnerability in unbound (ALPINE-CVE-2026-42960)
vulnerability in unbound (ALPINE-CVE-2026-42960). Data can be tampered with by attackers. Mitigation: upgrade to `1.25.1-r0` or later.
DEBIAN-CVE-2026-9064 Vulnerability in 389-ds-base (DEBIAN-CVE-2026-9064)
vulnerability in 389-ds-base (DEBIAN-CVE-2026-9064). Risk of unauthorized operations or information disclosure.
CVE-2026-9064 Vulnerability in dos (CVE-2026-9064)
vulnerability in dos (CVE-2026-9064). Risk of unauthorized operations or information disclosure.
CVE-2026-6728 Information Disclosure in wordpress (CVE-2026-6728)
vulnerability in wordpress (CVE-2026-6728). Risk of unauthorized operations or information disclosure.
CVE-2026-44933 Vulnerability in CVE-2026-44933 (CVE-2026-44933)
vulnerability in CVE-2026-44933 (CVE-2026-44933). Successful exploitation can lead to full system takeover. Exploitable via ``PluginScript``.
CVE-2026-44608 Vulnerability in nlnetlabs (CVE-2026-44608)
vulnerability in nlnetlabs (CVE-2026-44608). Risk of unauthorized operations or information disclosure.
CVE-2026-44390 Vulnerability in dos (CVE-2026-44390)
vulnerability in dos (CVE-2026-44390). Risk of unauthorized operations or information disclosure.
CVE-2026-42960 Vulnerability in nlnetlabs (CVE-2026-42960)
vulnerability in nlnetlabs (CVE-2026-42960). Data can be tampered with by attackers.
ALPINE-CVE-2026-42923 Vulnerability in unbound (ALPINE-CVE-2026-42923)
vulnerability in unbound (ALPINE-CVE-2026-42923). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.1-r0` or later.
ALPINE-CVE-2026-41292 Vulnerability in unbound (ALPINE-CVE-2026-41292)
vulnerability in unbound (ALPINE-CVE-2026-41292). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.1-r0` or later.
ALPINE-CVE-2026-42534 Vulnerability in unbound (ALPINE-CVE-2026-42534)
vulnerability in unbound (ALPINE-CVE-2026-42534). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.1-r0` or later.
ALPINE-CVE-2026-42959 Vulnerability in unbound (ALPINE-CVE-2026-42959)
vulnerability in unbound (ALPINE-CVE-2026-42959). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.1-r0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →