ROOT-OS-DEBIAN-11-CVE-2026-56000 CVE-2026-56000 in xorg-server - Patched by Root

Root has patched CVE-2026-56000 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0, <=1.1.0), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +3390 more potentially affected by CVE-2026-108039 via org.apache.cxf:cxf-core (>=3.0.0, <=3.6.12)

org.apache.cxf:cxf-core MAVEN version =3.0.0, =1.0.0, =1.11.0, =1.11.0, =1.0.0, =11.4-37, =3.6.1, =3.11.0, =3.19.0 and more Source cves: CVE-2026-108039 Source advisory: MEND:CVE-2026-108039...

org.apache.cxf.systests:cxf-systests-transport-netty (>=3.5.7, <=3.6.3), org.apache.cxf:apache-cxf (>=3.0.0, <=3.6.12) +1 more potentially affected by CVE-2026-107938 via org.apache.cxf:cxf-rt-transports-http-netty-client (>=3.0.0, <=3.6.12)

org.apache.cxf:cxf-rt-transports-http-netty-client MAVEN version =3.0.0, =3.5.7, =3.0.0, =3.0.0, =3.6.12 Source cves: CVE-2026-107938 Source advisory: MEND:CVE-2026-107938...

kr.jclab.wsman:abstract-wsman (>=0.0.1-rc2, <=0.0.1-rc4), kr.jclab.wsman:abstract-wsman-netty (>=0.0.2-rc1, <=0.0.4) +3 more potentially affected by CVE-2026-107938 via org.apache.cxf:cxf-rt-transports-http-netty-client (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-transports-http-netty-client MAVEN version =4.0.0, =0.0.1-rc2, =0.0.2-rc1, =4.0.2, =4.0.0, =4.0.0, =4.1.8 Source cves: CVE-2026-107938 Source advisory: MEND:CVE-2026-107938...

com.savoirtech.aetos:aetos (>=4.2.0.1, <=4.3.1), com.treelogic-swe:aws-mock (1.0) +141 more potentially affected by CVE-2026-97468 via org.apache.cxf.services.sts:cxf-services-sts-core (>=2.5.0, <=3.6.12)

org.apache.cxf.services.sts:cxf-services-sts-core MAVEN version =2.5.0, =4.2.0.1, =ec2-2013-02-01, =7.2.0, =6.3.0, =1.2.0, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.7, =1.0.7, =1.0.0, =1.0.2 and more Source cves: CVE-2026-97468 Source advisory: MEND:CVE-2026-97468...

br.com.esec.icpm:certillion-client-library (>=1.1.7, <=1.2.0), br.com.esec.icpm:certillion-client-library-resteasy-plugin (>=1.1.9, <=1.1.10) +364 more potentially affected by CVE-2026-97468 via org.apache.cxf:cxf-rt-ws-security (>=2.1.10, <=3.6.12)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.1.10, =1.1.7, =1.1.9, =1.2.5, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-97468 Source advisory: MEND:CVE-2026-97468...

com.codinglair.taf:taf-api-soap (>=1.0.0, <=1.3.0), cv.igrp:igrp-core (>=2.0.0.231123-rc1, <=2.0.0.240307-rc2) +115 more potentially affected by CVE-2026-97468 via org.apache.cxf:cxf-rt-ws-security (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-ws-security MAVEN version =4.0.0, =1.0.0, =2.0.0.231123-rc1, =4.0.2, =2.4.0, =1.3, =1.3, =1.3, =1.3, =1.3, =2.0.0.alpha1, =2.7.0.cr1, =3.8.0, =2.0.0.alpha1, =2.2.4, =3.33.14 - io.quarkiverse.cxf:quarkus-cxf-integration-test-ws-security-policy-fips 3.8.1 and more Source cves:...

io.quarkiverse.cxf:quarkus-cxf-integration-test-ws-trust (>=3.35.0, <=4.0.0.beta1), io.quarkiverse.cxf:quarkus-cxf-services-sts (>=3.35.0, <=4.0.0.beta1) +8 more potentially affected by CVE-2026-97468 via org.apache.cxf.services.sts:cxf-services-sts-core (>=4.2.0, <=4.2.3)

org.apache.cxf.services.sts:cxf-services-sts-core MAVEN version =4.2.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.3 Source cves: CVE-2026-97468 Source advisory: MEND:CVE-2026-97468...

com.axonivy.ivy.tool.soap:cxf-client-codegen (2.0.0), io.camelbee:camelbee-quarkus-core (3.2.1) +52 more potentially affected by CVE-2026-97468 via org.apache.cxf:cxf-rt-ws-security (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-ws-security MAVEN version =4.2.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.0.0.beta1 and more Source cves: CVE-2026-97468 Source advisory: MEND:CVE-2026-97468...

com.araguacaima.braas:braas-core (1.2), com.araguacaima:commons-utils (>=1.0.1, <=1.5.17) +274 more potentially affected by CVE-2026-86463 via org.apache.cxf:cxf-rt-rs-extension-search (>=2.6.0, <=3.6.12)

org.apache.cxf:cxf-rt-rs-extension-search MAVEN version =2.6.0, =1.0.1, =1.0.1, =0.9.0, =0.9.0, =0.2, =0.7, =0.7, =0.2, =0.1, =0.0.2, =1.0.0, =1.0.0, =1.1.9 and more Source cves: CVE-2026-86463 Source advisory: MEND:CVE-2026-86463...

com.github.arucard21.simplyrestful:deploy-jetty-cxf (>=1.0.0, <=1.1.0), com.github.arucard21.simplyrestful:deploy-springboot-cxf (>=1.0.0, <=1.1.0) +88 more potentially affected by CVE-2026-86463 via org.apache.cxf:cxf-rt-rs-extension-search (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-rs-extension-search MAVEN version =4.0.0, =1.0.0, =1.0.0, =0.165, =1.1.0-rc1, =4.8.2, =4.10.7, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0-m0, =4.0.0, =4.0.0-m0, =4.1.3 and more Source cves: CVE-2026-86463 Source advisory: MEND:CVE-2026-86463...

org.apache.cxf.fediz.systests.federation:fediz-systests-federation-oidcidpwebapp (>=1.3.0, <=1.7.2), org.apache.cxf.fediz:fediz-idp (>=1.3.0, <=1.7.2) +6 more potentially affected by CVE-2026-79650 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=3.1.6, <=3.6.12)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =3.1.6, =1.3.0, =1.3.0, =1.4.0, =1.3.0, =3.1.7, =3.3.0, =2.0.9, =2.0.9, =2.1.14 Source cves: CVE-2026-79650 Source advisory: MEND:CVE-2026-79650...

io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.8) +1 more potentially affected by CVE-2026-79650 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.8 Source cves: CVE-2026-79650 Source advisory: MEND:CVE-2026-79650...

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0, <=1.1.0), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +3390 more potentially affected by CVE-2026-78384 via org.apache.cxf:cxf-core (>=3.0.0, <=3.6.12)

org.apache.cxf:cxf-core MAVEN version =3.0.0, =1.0.0, =1.11.0, =1.11.0, =1.0.0, =11.4-37, =3.6.1, =3.11.0, =3.19.0 and more Source cves: CVE-2026-78384 Source advisory: MEND:CVE-2026-78384...

de.cezaryrk.olingo:odata-fit (5.1.0), io.tesseraql:tesseraql-cli (>=0.15.0, <=0.19.1) +20 more potentially affected by CVE-2026-73179 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =0.15.0, =0.15.0, =0.15.0, =0.15.0, =0.15.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.22.1 and more Source cves: CVE-2026-73179 Source advisory: MEND:CVE-2026-73179...

io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.8) +1 more potentially affected by CVE-2026-71575 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.8 Source cves: CVE-2026-71575 Source advisory: MEND:CVE-2026-71575...

CVE-2026-95609

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41...

ROOT-OS-UBUNTU-2404-CVE-2021-31879 CVE-2021-31879 in wget - Patched by Root

Root has patched CVE-2021-31879 in the wget package for Root:Ubuntu:24.04. Multiple fixed versions available...

CVE-2026-95609 WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41...

EUVD-2026-95606

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41...