309 matches found
ROOT-APP-PYPI-GHSA-3F7W-8RR8-F37F GHSA-3f7w-8rr8-f37f in GitPython - Patched by Root
Root has patched GHSA-3f7w-8rr8-f37f in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-64342 CVE-2026-64342 in linux - Patched by Root
Root has patched CVE-2026-64342 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-53237 CVE-2026-53237 in linux - Patched by Root
Root has patched CVE-2026-53237 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-23070 CVE-2026-23070 in linux - Patched by Root
Root has patched CVE-2026-23070 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-71077 CVE-2025-71077 in linux - Patched by Root
Root has patched CVE-2025-71077 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-39966 CVE-2025-39966 in linux - Patched by Root
Root has patched CVE-2025-39966 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-23378 CVE-2026-23378 in linux - Patched by Root
Root has patched CVE-2026-23378 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-40099 CVE-2025-40099 in linux - Patched by Root
Root has patched CVE-2025-40099 in the linux package for Root:Debian:13. Multiple fixed versions available...
CVE-2026-45572 Decidim: HTML content blocks allow stored script execution
Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, an administrator with landing-page editing privileges can store arbitrary HTML and JavaScript in an HTML content block, which Decidim::ContentBlocks::HtmlCellhtmlconten...
CVE-2026-64663 Statamic: Unsafe method invocation via Antlers template resolution allows data destruction
Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.1 and 6.24.0, manipulating user-supplied input incorporated into Antlers templates could result in the loss of content and assets, on sites whose templates pass untrusted input into affected areas, and exploitation...
ROOT-OS-UBUNTU-2404-CVE-2025-38574 CVE-2025-38574 in linux - Patched by Root
Root has patched CVE-2025-38574 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-22120 CVE-2025-22120 in linux - Patched by Root
Root has patched CVE-2025-22120 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-43439 CVE-2026-43439 in linux - Patched by Root
Root has patched CVE-2026-43439 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-43318 CVE-2026-43318 in linux - Patched by Root
Root has patched CVE-2026-43318 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-37949 CVE-2025-37949 in linux - Patched by Root
Root has patched CVE-2025-37949 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-23242 CVE-2026-23242 in linux - Patched by Root
Root has patched CVE-2026-23242 in the linux package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-71318 Nuxt: Unauthorized Component Instantiation via Server Island Props
Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an attacker can supply a top-level as prop to the /nuxtisland/ endpoint and drive dynamic component resolution through , resolveDynamicComponent, or h. This issue is fixed in 3.21.10 and 4.5.1...
CVE-2026-70611 Electron: DevTools embedder handler executes arbitrary files via shell open
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.1, and 42.0.0-beta.3, the DevTools reveal in file manager action could launch the target file rather than reveal it. An attacker with a separate means of running...
CVE-2026-70603 Electron: shell.openPath path validation bypass via embedded null byte
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.6, 40.9.0, 41.1.1, and 42.0.0-beta.1, shell.openPath did not reject paths containing embedded null bytes. Apps that perform string-only validation of file paths, for example...