ROOT-APP-NPM-CVE-2026-24842 CVE-2026-24842 in @rootio/tar - Patched by Root

Root has patched CVE-2026-24842 in the @rootio/tar package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-32997 CVE-2025-32997 in @rootio/http-proxy-middleware - Patched by Root

Root has patched CVE-2025-32997 in the @rootio/http-proxy-middleware package for Root:npm. Multiple fixed versions available...

npm ansi_up v4 - Cross-Site Scripting

npm package ansiup v4 is vulnerable to cross-site scripting because ANSI escape codes can be used to create HTML hyperlinks. id: CVE-2021-3377 info: name: npm ansiup v4 - Cross-Site Scripting author: geeknik severity: medium description: npm package ansiup v4 is vulnerable to cross-site scripting...

Netmask NPM Package - Server-Side Request Forgery

Netmask NPM Package is susceptible to server-side request forgery because of improper input validation of octal strings in netmask npm package. This allows unauthenticated remote attackers to perform indeterminate SSRF, remote file inclusion, and local file inclusion attacks on many of the...

ROOT-APP-NPM-CVE-2026-5038 CVE-2026-5038 in @rootio/multer - Patched by Root

Root has patched CVE-2026-5038 in the @rootio/multer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10741 AIKIDO-2026-10741 in @rootio/axios - Patched by Root

Root has patched AIKIDO-2026-10741 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-25639 CVE-2026-25639 in @rootio/axios - Patched by Root

Root has patched CVE-2026-25639 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2020-28168 CVE-2020-28168 in @rootio/axios - Patched by Root

Root has patched CVE-2020-28168 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-3749 CVE-2021-3749 in @rootio/axios - Patched by Root

Root has patched CVE-2021-3749 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44486 CVE-2026-44486 in @rootio/axios - Patched by Root

Root has patched CVE-2026-44486 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-62718 CVE-2025-62718 in @rootio/axios - Patched by Root

Root has patched CVE-2025-62718 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42042 CVE-2026-42042 in @rootio/axios - Patched by Root

Root has patched CVE-2026-42042 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41324 CVE-2026-41324 in @rootio/basic-ftp - Patched by Root

Root has patched CVE-2026-41324 in the @rootio/basic-ftp package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-64756 CVE-2025-64756 in @rootio/glob - Patched by Root

Root has patched CVE-2025-64756 in the @rootio/glob package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-26960 CVE-2026-26960 in @rootio/tar - Patched by Root

Root has patched CVE-2026-26960 in the @rootio/tar package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-5C6J-R48X-RMVQ GHSA-5c6j-r48x-rmvq in @rootio/serialize-javascript - Patched by Root

Root has patched GHSA-5c6j-r48x-rmvq in the @rootio/serialize-javascript package for Root:npm. Multiple fixed versions available...

Malicious code in streak-daycount (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5a02c91969e01fc57050b8fabfc6abe2e50b9455cdaa4357791d24546b5623a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in streak-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdbe692fd3eb07f38adbdf075f40fb7f0f656154e5f2e54570a97d6f6e1bba9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in svelte-streaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b07b98d6a7986da479ed75708e37dfbff0df7a6ee136f7dad1db24087bed2cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

NPM: fast-uri vulnerable to host confusion via failed IDN canonicalization

NPM: fast-uri vulnerable to host confusion via failed IDN canonicalization vulnerability discovered by ? in WordPress Npm fast-uri versions = 2.3.1, 2.4.2...