Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| RLSA-2026:36318 |
|
Vulnerability in aardvark-dns (RLSA-2026:36318)
vulnerability in aardvark-dns (RLSA-2026:36318). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:1.17.1-1.el9_8` or later.
|
| RLSA-2026:36315 |
|
Vulnerability in python3.14-pip (RLSA-2026:36315)
vulnerability in python3.14-pip (RLSA-2026:36315). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:25.2-3.el9_8.5` or later.
|
| RLSA-2026:36618 |
|
Vulnerability in nginx (RLSA-2026:36618)
vulnerability in nginx (RLSA-2026:36618). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1:1.24.0-7.module+el9.8.0+40218+76099d32.2.rocky.0.1` or later.
|
| RLSA-2026:36317 |
|
Vulnerability in skopeo (RLSA-2026:36317)
vulnerability in skopeo (RLSA-2026:36317). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:1.22.2-7.el9_8` or later.
|
| RLSA-2026:36195 |
|
Vulnerability in 389-ds-base (RLSA-2026:36195)
vulnerability in 389-ds-base (RLSA-2026:36195). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:2.8.0-8.el9_8` or later.
|
| MAL-2026-6977 |
|
Vulnerability in rarcore (MAL-2026-6977)
vulnerability in rarcore (MAL-2026-6977). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-6975 |
|
Vulnerability in oxntime (MAL-2026-6975)
vulnerability in oxntime (MAL-2026-6975). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15041 |
|
Vulnerability in redhat (CVE-2026-15041)
vulnerability in redhat (CVE-2026-15041). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-NPM-CVE-2026-30226 |
|
Vulnerability in @rootio/devalue (ROOT-APP-NPM-CVE-2026-30226)
vulnerability in @rootio/devalue (ROOT-APP-NPM-CVE-2026-30226). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.3-root.io.1` or later.
|
| ROOT-APP-NPM-CVE-2025-57820 |
|
Vulnerability in @rootio/devalue (ROOT-APP-NPM-CVE-2025-57820)
vulnerability in @rootio/devalue (ROOT-APP-NPM-CVE-2025-57820). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.3-root.io.1` or later.
|
| CVE-2026-56003 |
|
Vulnerability in x (CVE-2026-56003)
vulnerability in x (CVE-2026-56003). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56002 |
|
Vulnerability in x (CVE-2026-56002)
vulnerability in x (CVE-2026-56002). Successful exploitation can lead to full system takeover.
|
| MAL-2026-6972 |
|
Vulnerability in @vwfs-its/sf-sac-frontend (MAL-2026-6972)
vulnerability in @vwfs-its/sf-sac-frontend (MAL-2026-6972). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
|
| ROOT-APP-PYPI-CVE-2024-45231 |
|
Vulnerability in rootio-django (ROOT-APP-PYPI-CVE-2024-45231)
vulnerability in rootio-django (ROOT-APP-PYPI-CVE-2024-45231). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.13+root.io.3, 2.2.28+root.io.2, 3.2.25+root.io.2, 2.2.28+root.io.3, 3.2.25+root.io.3, 4.1.13+root.io.4` or later.
|
| ROOT-APP-PYPI-CVE-2025-48432 |
|
Vulnerability in rootio-django (ROOT-APP-PYPI-CVE-2025-48432)
vulnerability in rootio-django (ROOT-APP-PYPI-CVE-2025-48432). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.13+root.io.3, 2.2.28+root.io.2, 3.2.25+root.io.2, 2.2.28+root.io.3, 3.2.25+root.io.3, 4.1.13+root.io.4` or later.
|
| ROOT-APP-PYPI-CVE-2026-48776 |
|
Vulnerability in rootio-langgraph-sdk (ROOT-APP-PYPI-CVE-2026-48776)
vulnerability in rootio-langgraph-sdk (ROOT-APP-PYPI-CVE-2026-48776). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.3.13+root.io.1, 0.3.14+root.io.1, 0.3.14+root.io.2, 0.3.13+root.io.2` or later.
|
| ROOT-APP-PYPI-CVE-2022-36359 |
|
Vulnerability in rootio-django (ROOT-APP-PYPI-CVE-2022-36359)
vulnerability in rootio-django (ROOT-APP-PYPI-CVE-2022-36359). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.28+root.io.1, 2.2.28+root.io.2, 2.2.28+root.io.3` or later.
|
| RHSA-2026:36585 |
|
Red Hat Security Advisory: 389-ds-base security update
Red Hat Security Advisory: 389-ds-base security update
|
| RHSA-2026:36534 |
|
Vulnerability in kpatch-patch-5_14_0-570_116_1 (RHSA-2026:36534)
vulnerability in kpatch-patch-5_14_0-570_116_1 (RHSA-2026:36534). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1-3.el9_6` or later.
|
| RHSA-2026:36533 |
|
Vulnerability in kpatch-patch-5_14_0-427_100_1 (RHSA-2026:36533)
vulnerability in kpatch-patch-5_14_0-427_100_1 (RHSA-2026:36533). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1-8.el9_4` or later.
|
| RHSA-2026:36532 |
|
Vulnerability in kpatch-patch-5_14_0-284_117_1 (RHSA-2026:36532)
vulnerability in kpatch-patch-5_14_0-284_117_1 (RHSA-2026:36532). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1-16.el9_2` or later.
|
| RHSA-2026:36531 |
|
Vulnerability in kpatch-patch-4_18_0-477_107_1 (RHSA-2026:36531)
vulnerability in kpatch-patch-4_18_0-477_107_1 (RHSA-2026:36531). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1-9.el8_8` or later.
|
| RHSA-2026:36530 |
|
Vulnerability in kpatch-patch-4_18_0-553_109_1 (RHSA-2026:36530)
vulnerability in kpatch-patch-4_18_0-553_109_1 (RHSA-2026:36530). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1-6.el8_10` or later.
|
| RHSA-2026:36209 |
|
Red Hat Security Advisory: redhat-ds:12 security update
Red Hat Security Advisory: redhat-ds:12 security update
|
| RHSA-2026:36208 |
|
Red Hat Security Advisory: redhat-ds:11 security update
Red Hat Security Advisory: redhat-ds:11 security update
|
| RHSA-2026:36206 |
|
Red Hat Security Advisory: 389-ds:1.4 security update
Red Hat Security Advisory: 389-ds:1.4 security update
|
| RHSA-2026:36205 |
|
Red Hat Security Advisory: 389-ds-base security update
Red Hat Security Advisory: 389-ds-base security update
|
| RHSA-2026:36204 |
|
Red Hat Security Advisory: redhat-ds:11 security update
Red Hat Security Advisory: redhat-ds:11 security update
|
| RHSA-2026:36202 |
|
Red Hat Security Advisory: 389-ds:1.4 security update
Red Hat Security Advisory: 389-ds:1.4 security update
|
| RHSA-2026:36201 |
|
Red Hat Security Advisory: 389-ds:1.4 security update
Red Hat Security Advisory: 389-ds:1.4 security update
|
| RHSA-2026:36200 |
|
Red Hat Security Advisory: redhat-ds:11 security update
Red Hat Security Advisory: redhat-ds:11 security update
|
| RHSA-2026:36198 |
|
Red Hat Security Advisory: 389-ds-base security update
Red Hat Security Advisory: 389-ds-base security update
|
| RHSA-2026:36197 |
|
Red Hat Security Advisory: 389-ds:1.4 security update
Red Hat Security Advisory: 389-ds:1.4 security update
|
| RHSA-2026:36196 |
|
Red Hat Security Advisory: 389-ds-base security update
Red Hat Security Advisory: 389-ds-base security update
|
| RHSA-2026:36195 |
|
Red Hat Security Advisory: 389-ds-base security update
Red Hat Security Advisory: 389-ds-base security update
|
| RHSA-2026:36188 |
|
Red Hat Security Advisory: perl-HTTP-Daemon security update
Red Hat Security Advisory: perl-HTTP-Daemon security update
|
| RHSA-2026:36189 |
|
Red Hat Security Advisory: perl-HTTP-Daemon security update
Red Hat Security Advisory: perl-HTTP-Daemon security update
|
| RHSA-2026:36172 |
|
Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 security update
Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 security update
|
| MAL-2026-6974 |
|
Vulnerability in tronhapy (MAL-2026-6974)
vulnerability in tronhapy (MAL-2026-6974). Risk of unauthorized operations or information disclosure.
|
| GHSA-mgwg-48mg-h7pg |
|
Vulnerability in gitlens (GHSA-mgwg-48mg-h7pg)
vulnerability in gitlens (GHSA-mgwg-48mg-h7pg). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6280 |
|
Vulnerability in CVE-2026-6280 (CVE-2026-6280)
vulnerability in CVE-2026-6280 (CVE-2026-6280). Confidential information can be exposed externally.
|
| CVE-2026-57260 |
|
Out-of-Bounds Write in foxit (CVE-2026-57260)
out-of-bounds write in foxit (CVE-2026-57260). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57259 |
|
XXE (XML External Entity) in foxit (CVE-2026-57259)
vulnerability in foxit (CVE-2026-57259). Confidential information can be exposed externally.
|
| CVE-2026-57258 |
|
Out-of-Bounds Read in foxit (CVE-2026-57258)
vulnerability in foxit (CVE-2026-57258). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57257 |
|
Out-of-Bounds Read in foxit (CVE-2026-57257)
vulnerability in foxit (CVE-2026-57257). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57256 |
|
Use-After-Free in foxit (CVE-2026-57256)
vulnerability in foxit (CVE-2026-57256). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57255 |
|
Out-of-Bounds Read in foxit (CVE-2026-57255)
vulnerability in foxit (CVE-2026-57255). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57254 |
|
Vulnerability in foxit (CVE-2026-57254)
vulnerability in foxit (CVE-2026-57254). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57253 |
|
Out-of-Bounds Read in foxit (CVE-2026-57253)
vulnerability in foxit (CVE-2026-57253). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57252 |
|
Use-After-Free in foxit (CVE-2026-57252)
vulnerability in foxit (CVE-2026-57252). Successful exploitation can lead to full system takeover.
|