ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webflux - Patched by Root

Root has patched CVE-2026-41842 in the org.springframework:spring-webflux package for Root:Maven. Multiple fixed versions available...

Malicious code in fastly-vcl-language-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f77be5ce1488e7867223b63fd5c90060e98d6a44325ff2f71bed2b61653d649 The package declares scripts.preinstall = 'node vishu.js', which runs unconditionally on npm install. vishu.js fetches the installer's public IP via...

GHSA-XPHW-4F88-5F39 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-azure-kusto, kube-logging-operator-fips, local-path-provisioner-fips, crossplane-provider-aws-cloudsearch-fips, kubernetes-csi-external-resizer-fips, authservice, rancher-fleet, configmap-reload-fips,...

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-kusto, kube-logging-operator-fips, dockerize, crossplane-provider-aws-cloudsearch-fips, kube-conformance, opensearch-datasource, crossplane-provider-aws-emrserverless-fips, weaviate, crossplane-provider-aws-route53-fips, opa-fips,...

CVE-2026-50523 Microsoft PowerShell Remote Code Execution Vulnerability

...

GO-2026-5371 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno-notation-aws...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, docker-compose, melange, trivy, k9s-fips, prometheus-fips, openfga-fips, opentelemetry-collector-contrib-fips, grype, grype-fips, openfga, aws-otel-collector, grype-db, aws-otel-collector-fips, spire-server, docker-compose-fips, syft,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: tkn, timestamp-authority-fips, slsa-verifier, bank-vaults-fips, cosign-fips, cosign, kots, spire-server, dex, argo-workflows, terragrunt, fulcio, sops, fulcio-fips, flux-kustomize-controller, flux-source-controller, falcoctl-fips, rekor, oauth2-proxy, tekton-chains,...

GO-2026-4980 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudsearch-fips, kubernetes-csi-external-resizer-fips, authservice, kube-conformance, gotrue, opensearch-datasource, crossplane-provider-aws-emrserverless-fips, crossplane-provider-aws-route53-fips, flux-helm-controller-fips, opa-fips,...

GO-2024-2887 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gcp, dockerize, configmap-reload-fips, cert-exporter-fips, cluster-proportional-autoscaler, harbor-scanner-trivy-fips, weaviate, kyverno-policy-reporter, newrelic-prometheus-configurator, opa-fips, cert-manager-webhook-pdns, node-feature-discovery...

GO-2023-1589 vulnerabilities

Vulnerabilities for packages: zot...

GO-2023-2375 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GO-2026-5822 vulnerabilities

Vulnerabilities for packages: guac, kube-arangodb...

GO-2022-0236 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, k3d, hey, grpcurl...

GO-2026-5968 vulnerabilities

Vulnerabilities for packages: dagdotdev...

GO-2025-4173 vulnerabilities

Vulnerabilities for packages: falcosidekick, bento, minio...

GO-2026-5023 vulnerabilities

Vulnerabilities for packages: cilium-cli, kine, external-secrets-operator, knative-serving, kots, kubernetes-dashboard, cert-manager, trivy, kubernetes, zot, containerd, gitlab-kas, flux-image-automation-controller, mattermost, chisel, aactl, osv-scanner, k3s, kyverno, argocd-image-updater,...

CVE-2026-73415 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

CVE-2026-73502 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gcp, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudsearch-fips, hugo-extended, crossplane-provider-aws-elasticache, crossplane-provider-aws-emrserverless-fips, crossplane-aws-xray-fips, crossplane-provider-aws-route53-fips,...

Malicious code in fmt-util-k7x2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8613ffc5393a31685344c247925a5ef104f7daf3f0d2f45a51918adba7d344 [email protected] advertises itself as a trivial string-formatting utility index.js exports two-line pad/trim helpers, but its package.json declare...