ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webflux - Patched by Root

Root has patched CVE-2026-41842 in the org.springframework:spring-webflux package for Root:Maven. Multiple fixed versions available...

Malicious code in fastly-vcl-language-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f77be5ce1488e7867223b63fd5c90060e98d6a44325ff2f71bed2b61653d649 The package declares scripts.preinstall = 'node vishu.js', which runs unconditionally on npm install. vishu.js fetches the installer's public IP via...

GHSA-XPHW-4F88-5F39 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53recoverycontrolconfig-fips, helmfile, apm-server-fips, nifikop-fips, k8sgateway-fips, cloud-provider-azure-fips, crossplane-function-go-templating-fips, kubevela, juicefs, crossplane-provider-aws-organizations-fips, sops-fips,...

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: vale, crossplane-function-go-templating-fips, kubevela, helm-diff, dataplaneapi-fips, crossplane-provider-aws-opensearchserverless-fips, cue-fips, tempo-fips, tflint-fips, aws-node-termination-handler-fips, nri-apache, crossplane-provider-aws-elbv2, xeol-fips,...

CVE-2026-50523 Microsoft PowerShell Remote Code Execution Vulnerability

...

GO-2026-5371 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno-notation-aws...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: openfga-fips, docker-compose-fips, trufflehog-fips, prometheus-fips, aws-otel-collector, osv-scanner, docker-compose, kargo, splunk-otel-collector-fips, buildah, falcoctl, telegraf, cadvisor, nerdctl, docker-cli-buildx, tw, elastic-agent, buildkitd-fips, trivy-fips,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: gitsign, dex, flux-kustomize-controller, cloudflared, vexctl, bank-vaults-fips, spire-server-fips, oauth2-proxy, rekor, timestamp-authority-fips, spire-server, fulcio, fulcio-fips, cosign, tkn, falcoctl-fips, slsa-verifier, kots, flux-source-controller, sops,...

GO-2026-4980 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53recoverycontrolconfig-fips, helmfile, apm-server-fips, nifikop-fips, k8sgateway-fips, cloud-provider-azure-fips, nginx-kubernetes-ingress, crossplane-function-go-templating-fips, kubevela, temporal-server, aws-flb-kinesis, juicefs,...

GO-2024-2887 vulnerabilities

Vulnerabilities for packages: gobump, kubevela, istio-pilot-discovery, aws-flb-kinesis, trivy-fips, dataplaneapi-fips, cue-fips, cluster-proportional-autoscaler, nri-haproxy, wave, nri-apache, kafkaexporter, rabbitmq-default-user-credential-updater, boring-registry,...

GO-2023-1589 vulnerabilities

Vulnerabilities for packages: zot...

GO-2023-2375 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GO-2026-5822 vulnerabilities

Vulnerabilities for packages: kube-arangodb, guac...

GO-2022-0236 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, grpcurl, hey, k3d...

GO-2026-5968 vulnerabilities

Vulnerabilities for packages: dagdotdev...

GO-2025-4173 vulnerabilities

Vulnerabilities for packages: falcosidekick, bento, minio...

GO-2026-5023 vulnerabilities

Vulnerabilities for packages: k3s, external-dns, zarf, nerdctl, gitea, flux-source-controller, gitlab-kas, osv-scanner, kots, trivy, trivy-operator, kubescape, spire-server, mattermost, kine, cert-manager, containerd, kaf, external-secrets-operator, fscrypt, loki, cilium, opentelemetry-collector,...

CVE-2026-73415 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

CVE-2026-73502 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53recoverycontrolconfig-fips, crossplane-provider-aws-keyspaces-fips, kubevela, crossplane-provider-aws-organizations-fips, crossplane-provider-aws-chime-fips, crossplane-provider-aws-cloudformation,...

Malicious code in fmt-util-k7x2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8613ffc5393a31685344c247925a5ef104f7daf3f0d2f45a51918adba7d344 [email protected] advertises itself as a trivial string-formatting utility index.js exports two-line pad/trim helpers, but its package.json declare...