CVE-2026-76845 adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction

adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archive entry name against the resolved extraction root, and Utils.writeFileTo opens the computed destination with...

MAL-2026-14404 Malicious code in @blurrydespair/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7ff09078e56bd40b5ad38f72027a55a39067b82aaffb0bfe6891e3d6d912e8 Package advertises itself as 'Open Whisper Systems libsignal for Node.js' but ships an install.js that has nothing to do with libsignal. On require o...

ROOT-APP-MAVEN-CVE-2019-14439 CVE-2019-14439 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-14439 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-35491 CVE-2020-35491 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-35491 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-36184 CVE-2020-36184 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-36184 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2019-12086 CVE-2019-12086 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-12086 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-7489 CVE-2018-7489 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2018-7489 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-36179 CVE-2020-36179 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-36179 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-11307 CVE-2018-11307 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2018-11307 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-36182 CVE-2020-36182 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-36182 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-35490 CVE-2020-35490 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-35490 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-35728 CVE-2020-35728 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-35728 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2019-17267 CVE-2019-17267 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-17267 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-12022 CVE-2018-12022 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2018-12022 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-19362 CVE-2018-19362 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2018-19362 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2019-14892 CVE-2019-14892 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-14892 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

DEBIAN-CVE-2026-78323

A flaw was found in JSS Java Security Services. The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTEDCA flags to be accepted as trust anchors for TLS connections. In non-default configurations...

UBUNTU-CVE-2026-78323

A flaw was found in JSS Java Security Services. The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTEDCA flags to be accepted as trust anchors for TLS connections. In non-default configurations...

ROOT-APP-PYPI-CVE-2025-24793 CVE-2025-24793 in snowflake-connector-python - Patched by Root

Root has patched CVE-2025-24793 in the snowflake-connector-python package for Root:PyPI. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-9080 CVE-2026-9080 in curl - Patched by Root

Root has patched CVE-2026-9080 in the curl package for Root:Debian:13. Multiple fixed versions available...