CLSA-2026-1791197262 TuxCare security update for base-x (1 CVE)

TuxCare rebuilt base-x to address 1 CVE. Fixed in 2.0.6-tuxcare.1...

CLSA-2026-1791196334 TuxCare security update for nanoid (2 CVEs)

TuxCare rebuilt nanoid to address 2 CVEs. Fixed in 3.3.12-tuxcare.2...

CLSA-2026-1791195835 TuxCare security update for @angular/language-service (9 CVEs)

TuxCare rebuilt @angular/language-service to address 9 CVEs. Fixed in 19.2.14-tuxcare.3...

ROOT-APP-NPM-CVE-2026-14643 CVE-2026-14643 in undici - Patched by Root

Root has patched CVE-2026-14643 in the undici package for Root:npm. Multiple fixed versions available...

CLSA-2026-1791192659 TuxCare security update for @xmldom/xmldom (10 CVEs)

TuxCare rebuilt @xmldom/xmldom to address 10 CVEs. Fixed in 0.9.8-tuxcare.2...

CLSA-2026-1791192281 TuxCare security update for undici (1 CVE)

TuxCare rebuilt undici to address 1 CVE. Fixed in 6.19.5-tuxcare.3...

CLSA-2026-1791190936 TuxCare security update for 21 packages (1 CVE)

TuxCare rebuilt 21 packages to address 1 CVE. Fixed in 2.6.2-tuxcare.1...

CLSA-2026-1791190774 TuxCare security update for dulwich (1 CVE)

TuxCare rebuilt dulwich to address 1 CVE. Fixed in 0.21.7.post1+tuxcare...

CLSA-2026-1791188851 TuxCare security update for protobuf (1 CVE)

TuxCare rebuilt protobuf to address 1 CVE. Fixed in 4.25.9.post1+tuxcare...

CLSA-2026-1791188726 TuxCare security update for org.springframework.security (1 CVE)

TuxCare rebuilt 19 org.springframework.security packages to address 1 CVE. Fixed in 6.2.2-tuxcare.7...

CLSA-2026-1791187923 TuxCare security update for urllib3 (1 CVE)

TuxCare rebuilt urllib3 to address 1 CVE. Fixed in 2.5.0.post1+tuxcare...

ROOT-APP-NPM-CVE-2025-13204 CVE-2025-13204 in expr-eval - Patched by Root

Root has patched CVE-2025-13204 in the expr-eval package for Root:npm. Multiple fixed versions available...

CLSA-2026-1791186983 TuxCare security update for org.springframework (7 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 7 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.10...

CVE-2026-105250 vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zero

A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decodemsima of the file src/coding/imadecoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attack can be executed remotely...

ROOT-APP-MAVEN-CVE-2022-23307 CVE-2022-23307 in log4j:log4j - Patched by Root

Root has patched CVE-2022-23307 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2023-26464 CVE-2023-26464 in log4j:log4j - Patched by Root

Root has patched CVE-2023-26464 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2021-4104 CVE-2021-4104 in log4j:log4j - Patched by Root

Root has patched CVE-2021-4104 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-54572 CVE-2026-54572 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-54572 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-88044 CVE-2026-88044 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-88044 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-59733 CVE-2026-59733 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-59733 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...