Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
MAL-2026-4581 Vulnerability in idlidosa (MAL-2026-4581)
vulnerability in idlidosa (MAL-2026-4581). Risk of unauthorized operations or information disclosure. Exploitable via ``electron.exe``.
MAL-2026-4684 Vulnerability in tdpilot (MAL-2026-4684)
vulnerability in tdpilot (MAL-2026-4684). Risk of unauthorized operations or information disclosure.
MAL-2026-4466 Vulnerability in @weirdorg/config (MAL-2026-4466)
vulnerability in @weirdorg/config (MAL-2026-4466). Risk of unauthorized operations or information disclosure. Exploitable via ``config``.
SUSE-SU-2026:2025-1 Security update for openssh
Security update for openssh
SUSE-SU-2026:2024-1 Security update for openssh
Security update for openssh
MAL-2026-4481 Vulnerability in arc-diag-util (MAL-2026-4481)
vulnerability in arc-diag-util (MAL-2026-4481). Risk of unauthorized operations or information disclosure.
MAL-2026-4471 Vulnerability in @zesyn/zeditor (MAL-2026-4471)
vulnerability in @zesyn/zeditor (MAL-2026-4471). Risk of unauthorized operations or information disclosure. Exploitable via ``navigator.sendBeacon``.
CVE-2026-7385 Vulnerability in wordpress (CVE-2026-7385)
vulnerability in wordpress (CVE-2026-7385). Risk of unauthorized operations or information disclosure.
CVE-2026-6566 Vulnerability in wordpress (CVE-2026-6566)
vulnerability in wordpress (CVE-2026-6566). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /imagely/v1/images/{id}`.
CVE-2026-5776 Vulnerability in wordpress (CVE-2026-5776)
vulnerability in wordpress (CVE-2026-5776). Risk of unauthorized operations or information disclosure.
CVE-2026-47784 Vulnerability in memcached (CVE-2026-47784)
vulnerability in memcached (CVE-2026-47784). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.6.42` or later.
CVE-2026-47783 Vulnerability in memcached (CVE-2026-47783)
vulnerability in memcached (CVE-2026-47783). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.6.42` or later.
CVE-2026-2955 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2955)
cross-site scripting in wordpress (CVE-2026-2955). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-47783 Vulnerability in memcached (UBUNTU-CVE-2026-47783)
vulnerability in memcached (UBUNTU-CVE-2026-47783). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.6.14-1ubuntu0.2` or later.
UBUNTU-CVE-2026-47784 Vulnerability in memcached (UBUNTU-CVE-2026-47784)
vulnerability in memcached (UBUNTU-CVE-2026-47784). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.6.14-1ubuntu0.2` or later.
ROOT-APP-PYPI-CVE-2026-27199 Vulnerability in rootio-werkzeug (ROOT-APP-PYPI-CVE-2026-27199)
vulnerability in rootio-werkzeug (ROOT-APP-PYPI-CVE-2026-27199). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.1+root.io.1, 3.1.3+root.io.1, 3.1.1+root.io.2, 3.1.3+root.io.2, 3.1.3+root.io.3, 3.1.1+root.io.3, 3.1.3+root.io.4, 3.1.0+root.io.1` or later.
ROOT-APP-PYPI-CVE-2026-21860 Vulnerability in rootio-Werkzeug (ROOT-APP-PYPI-CVE-2026-21860)
vulnerability in rootio-Werkzeug (ROOT-APP-PYPI-CVE-2026-21860). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.3+root.io.3, 3.1.3+root.io.4, 3.1.0+root.io.1` or later.
ROOT-APP-PYPI-CVE-2025-66221 Vulnerability in rootio-Werkzeug (ROOT-APP-PYPI-CVE-2025-66221)
vulnerability in rootio-Werkzeug (ROOT-APP-PYPI-CVE-2025-66221). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.7+root.io.5, 3.1.3+root.io.3, 3.1.3+root.io.4, 2.3.7+root.io.6, 3.1.0+root.io.1` or later.
SUSE-SU-2026:2023-1 Vulnerability in SUSE-SU-2026:2023-1 (SUSE-SU-2026:2023-1)
vulnerability in SUSE-SU-2026:2023-1 (SUSE-SU-2026:2023-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:2022-1 Vulnerability in SUSE-SU-2026:2022-1 (SUSE-SU-2026:2022-1)
vulnerability in SUSE-SU-2026:2022-1 (SUSE-SU-2026:2022-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:2021-1 Vulnerability in SUSE-SU-2026:2021-1 (SUSE-SU-2026:2021-1)
vulnerability in SUSE-SU-2026:2021-1 (SUSE-SU-2026:2021-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:2020-1 Vulnerability in SUSE-SU-2026:2020-1 (SUSE-SU-2026:2020-1)
vulnerability in SUSE-SU-2026:2020-1 (SUSE-SU-2026:2020-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:2019-1 Vulnerability in SUSE-SU-2026:2019-1 (SUSE-SU-2026:2019-1)
vulnerability in SUSE-SU-2026:2019-1 (SUSE-SU-2026:2019-1). Risk of unauthorized operations or information disclosure.
MAL-2026-4467 Vulnerability in @weirdorg/dotenv (MAL-2026-4467)
vulnerability in @weirdorg/dotenv (MAL-2026-4467). Risk of unauthorized operations or information disclosure. Exploitable via ``dotenv``.
MAL-2026-4667 Vulnerability in seekcode (MAL-2026-4667)
vulnerability in seekcode (MAL-2026-4667). Risk of unauthorized operations or information disclosure. Exploitable via ``defaultBaseUrlForProvider``.
MAL-2026-4422 Vulnerability in @qwedqwed/axios (MAL-2026-4422)
vulnerability in @qwedqwed/axios (MAL-2026-4422). Risk of unauthorized operations or information disclosure.
ROOT-APP-PYPI-CVE-2026-28684 Vulnerability in rootio-python-dotenv (ROOT-APP-PYPI-CVE-2026-28684)
vulnerability in rootio-python-dotenv (ROOT-APP-PYPI-CVE-2026-28684). Data can be tampered with by attackers. Mitigation: upgrade to `1.2.1+root.io.1, 1.1.1+root.io.1, 1.2.1+root.io.2, 1.1.1+root.io.2` or later.
GHSA-8w97-mwv3-cwx3 Vulnerability in ts-logger-pack (GHSA-8w97-mwv3-cwx3)
vulnerability in ts-logger-pack (GHSA-8w97-mwv3-cwx3). Risk of unauthorized operations or information disclosure.
MAL-2026-4199 Vulnerability in ts-logger-pack (MAL-2026-4199)
vulnerability in ts-logger-pack (MAL-2026-4199). Risk of unauthorized operations or information disclosure.
GHSA-h9jr-prgp-c322 Vulnerability in terminal-logger-utils (GHSA-h9jr-prgp-c322)
vulnerability in terminal-logger-utils (GHSA-h9jr-prgp-c322). Risk of unauthorized operations or information disclosure.
MAL-2026-4198 Vulnerability in terminal-logger-utils (MAL-2026-4198)
vulnerability in terminal-logger-utils (MAL-2026-4198). Risk of unauthorized operations or information disclosure.
ROOT-APP-NPM-CVE-2025-69873 Vulnerability in @rootio/ajv (ROOT-APP-NPM-CVE-2025-69873)
vulnerability in @rootio/ajv (ROOT-APP-NPM-CVE-2025-69873). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.6-root.io.1, 8.12.0-root.io.1, 8.17.1-root.io.1, 8.17.1-root.io.2, 6.12.6-root.io.2, 8.12.0-root.io.2, 4.11.8-root.io.1, 4.11.8-root.io.2, 6.12.6-root.io.3, 8.12.0-root.io.3, 8.17.1-root.io.3, 8.12.0-root.io.4, 8.17.1-root.io.4` or later.
ROOT-APP-GOBINARY-CVE-2025-22870 Vulnerability in rootio-golang.org/x/net (ROOT-APP-GOBINARY-CVE-2025-22870)
vulnerability in rootio-golang.org/x/net (ROOT-APP-GOBINARY-CVE-2025-22870). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v0.33.0-root.io.1` or later.
ROOT-APP-GOBINARY-CVE-2025-22872 Vulnerability in rootio-golang.org/x/net (ROOT-APP-GOBINARY-CVE-2025-22872)
vulnerability in rootio-golang.org/x/net (ROOT-APP-GOBINARY-CVE-2025-22872). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v0.33.0-root.io.1` or later.
ROOT-APP-GOBINARY-CVE-2025-47914 Vulnerability in rootio-golang.org/x/crypto (ROOT-APP-GOBINARY-CVE-2025-47914)
vulnerability in rootio-golang.org/x/crypto (ROOT-APP-GOBINARY-CVE-2025-47914). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v0.31.0-root.io.1, v0.40.0-root.io.1, v0.37.0-root.io.1, v0.35.0-root.io.1` or later.
ROOT-APP-GOBINARY-CVE-2025-58181 Vulnerability in rootio-golang.org/x/crypto (ROOT-APP-GOBINARY-CVE-2025-58181)
vulnerability in rootio-golang.org/x/crypto (ROOT-APP-GOBINARY-CVE-2025-58181). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v0.40.0-root.io.1, v0.31.0-root.io.1, v0.37.0-root.io.1, v0.35.0-root.io.1` or later.
GHSA-vw7r-pxm7-p56f Vulnerability in @sec-loans-ui/utils (GHSA-vw7r-pxm7-p56f)
vulnerability in @sec-loans-ui/utils (GHSA-vw7r-pxm7-p56f). Risk of unauthorized operations or information disclosure. Exploitable via ``ltidi.storage.googleapis.com``.
MAL-2026-4432 Vulnerability in @sec-loans-ui/utils (MAL-2026-4432)
vulnerability in @sec-loans-ui/utils (MAL-2026-4432). Risk of unauthorized operations or information disclosure. Exploitable via ``ltidi.storage.googleapis.com``.
GHSA-4576-fp54-qqfc Vulnerability in @riskine-frontend/design-elements (GHSA-4576-fp54-qqfc)
vulnerability in @riskine-frontend/design-elements (GHSA-4576-fp54-qqfc). Risk of unauthorized operations or information disclosure. Exploitable via ``ltidisafe``.
MAL-2026-4425 Vulnerability in @riskine-frontend/design-elements (MAL-2026-4425)
vulnerability in @riskine-frontend/design-elements (MAL-2026-4425). Risk of unauthorized operations or information disclosure. Exploitable via ``ltidisafe``.
MAL-2026-4183 Vulnerability in openclaw-agent (MAL-2026-4183)
vulnerability in openclaw-agent (MAL-2026-4183). Risk of unauthorized operations or information disclosure.
BELL-CVE-2026-43493 BELL-CVE-2026-43493
BELL-CVE-2026-43492 BELL-CVE-2026-43492
BELL-CVE-2026-43491 BELL-CVE-2026-43491
RLSA-2026:19359 Vulnerability in openexr (RLSA-2026:19359)
vulnerability in openexr (RLSA-2026:19359). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:3.1.1-3.el9_7.2` or later.
RLSA-2026:19354 Vulnerability in PackageKit (RLSA-2026:19354)
vulnerability in PackageKit (RLSA-2026:19354). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1.2.6-2.el9_7` or later.
GHSA-6734-623v-3p4r Vulnerability in react-tracked-tony (GHSA-6734-623v-3p4r)
vulnerability in react-tracked-tony (GHSA-6734-623v-3p4r). Risk of unauthorized operations or information disclosure. Exploitable via ``require``.
MAL-2026-4661 Vulnerability in react-tracked-tony (MAL-2026-4661)
vulnerability in react-tracked-tony (MAL-2026-4661). Risk of unauthorized operations or information disclosure. Exploitable via ``require``.
MAL-2026-4654 Vulnerability in qazaq-cli (MAL-2026-4654)
vulnerability in qazaq-cli (MAL-2026-4654). Risk of unauthorized operations or information disclosure. Exploitable via ``QAZAQ_PROVIDER``.
MAL-2026-4648 Vulnerability in promptbook-cli (MAL-2026-4648)
vulnerability in promptbook-cli (MAL-2026-4648). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →