ROOT-APP-PYPI-GHSA-P538-C434-8V24 GHSA-p538-c434-8v24 in GitPython - Patched by Root

Root has patched GHSA-p538-c434-8v24 in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10846 AIKIDO-2026-10846 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10846 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10839 AIKIDO-2026-10839 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10839 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10729 AIKIDO-2026-10729 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10729 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10723 AIKIDO-2026-10723 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10723 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10844 AIKIDO-2026-10844 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10844 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10840 AIKIDO-2026-10840 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10840 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10845 AIKIDO-2026-10845 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10845 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10842 AIKIDO-2026-10842 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10842 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10718 AIKIDO-2026-10718 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10718 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10720 AIKIDO-2026-10720 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10720 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10727 AIKIDO-2026-10727 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10727 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10717 AIKIDO-2026-10717 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10717 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10731 AIKIDO-2026-10731 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10731 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10719 AIKIDO-2026-10719 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10719 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2015-9235 CVE-2015-9235 in jsonwebtoken - Patched by Root

Root has patched CVE-2015-9235 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...

CVE-2026-75101: Authorization Bypass Through User-Controlled Key

An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of the instance to read the raw diff or patch of pull requests in private repositories without authorization. Access tokens for raw pull request diffs and patches were scoped to th...

PT-2026-97020

Name of the Vulnerable Software and Affected Versions Kaneo versions 2.3.12 through 2.12.1 Description Authenticated workspace members with viewer or member roles can delete and modify tasks beyond their assigned permissions. This occurs because the 'PATCH /api/task/bulk' endpoint verifies...

CVE-2026-63104: Missing Authorization

Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by exploiting the bulk task endpoint that omits workspace permission checks...

PT-2026-97017

Name of the Vulnerable Software and Affected Versions Spree versions 5.4.0 through 5.4.3 Spree versions 5.5.0 through 5.5.3 Description An authenticated customer can associate an eligible guest cart with their own account and access the billing and shipping address data stored within that cart...