ROOT-OS-UBUNTU-2404-CVE-2025-37773 CVE-2025-37773 in rootio-linux - Patched by Root

Root has patched CVE-2025-37773 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-46012 CVE-2026-46012 in rootio-linux - Patched by Root

Root has patched CVE-2026-46012 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-23006 CVE-2026-23006 in rootio-linux - Patched by Root

Root has patched CVE-2026-23006 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-40024 CVE-2025-40024 in rootio-linux - Patched by Root

Root has patched CVE-2025-40024 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-31441 CVE-2026-31441 in rootio-linux - Patched by Root

Root has patched CVE-2026-31441 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

CVE-2026-12715 Missing Authorization in Firebase Studio allows Cross-Tenant Source Code Theft

Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no...

ROOT-APP-NPM-CVE-2026-49978 CVE-2026-49978 in @rootio/dompurify - Patched by Root

Root has patched CVE-2026-49978 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-42497 CVE-2026-42497 in rootio-perl - Patched by Root

Root has patched CVE-2026-42497 in the rootio-perl package for Root:Debian:11. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-55471 CVE-2026-55471 in io.root.ca.uhn.hapi.fhir:org.hl7.fhir.utilities - Patched by Root

Root has patched CVE-2026-55471 in the io.root.ca.uhn.hapi.fhir:org.hl7.fhir.utilities package for Root:Maven. Multiple fixed versions available...

CVE-2026-52840

Affected software: Easy!Appointments (self-hosted) prior to 1.6.0. Vulnerability: Server-Side Request Forgery (SSRF) in the CalDAV connection test. In Caldav::connect_to_server (application/controllers/Caldav.php:60), the request’s caldav_url is handed to a Guzzle REPORT call without proper schem...

ROOT-OS-DEBIAN-11-CVE-2025-39826 CVE-2025-39826 in rootio-linux - Patched by Root

Root has patched CVE-2025-39826 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38436 CVE-2025-38436 in rootio-linux - Patched by Root

Root has patched CVE-2025-38436 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38108 CVE-2025-38108 in rootio-linux - Patched by Root

Root has patched CVE-2025-38108 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-53180 CVE-2024-53180 in rootio-linux - Patched by Root

Root has patched CVE-2024-53180 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-46049 CVE-2026-46049 in rootio-linux - Patched by Root

Root has patched CVE-2026-46049 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-50120 CVE-2022-50120 in rootio-linux - Patched by Root

Root has patched CVE-2022-50120 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-31466 CVE-2026-31466 in rootio-linux - Patched by Root

Root has patched CVE-2026-31466 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-40196 CVE-2025-40196 in rootio-linux - Patched by Root

Root has patched CVE-2025-40196 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-53268 CVE-2026-53268 in rootio-linux - Patched by Root

Root has patched CVE-2026-53268 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-15522 tugcantopaloglu godot-mcp run_project index.js validatePath path traversal

A security flaw has been discovered in tugcantopaloglu godot-mcp 2.0.0. Affected by this vulnerability is the function validatePath of the file build/index.js of the component runproject. The manipulation of the argument projectPath results in path traversal. Attacking locally is a requirement. T...