EUVD-2026-45551

Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal backslash character U+005C as an authority delimiter. Node's native WHATWG URL parser, used by fetch, undici, and Node's http and https clients, normalizes the...

ROOT-OS-UBUNTU-2404-CVE-2025-38440 CVE-2025-38440 in rootio-linux - Patched by Root

Root has patched CVE-2025-38440 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-71232 CVE-2025-71232 in rootio-linux - Patched by Root

Root has patched CVE-2025-71232 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-31602 CVE-2026-31602 in rootio-linux - Patched by Root

Root has patched CVE-2026-31602 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-53353 CVE-2026-53353 in rootio-linux - Patched by Root

Root has patched CVE-2026-53353 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-21772 CVE-2025-21772 in rootio-linux - Patched by Root

Root has patched CVE-2025-21772 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-38700 CVE-2025-38700 in rootio-linux - Patched by Root

Root has patched CVE-2025-38700 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-46070 CVE-2026-46070 in rootio-linux - Patched by Root

Root has patched CVE-2026-46070 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-57857 CVE-2024-57857 in rootio-linux - Patched by Root

Root has patched CVE-2024-57857 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-37817 CVE-2025-37817 in rootio-linux - Patched by Root

Root has patched CVE-2025-37817 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38250 CVE-2025-38250 in rootio-linux - Patched by Root

Root has patched CVE-2025-38250 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38194 CVE-2025-38194 in rootio-linux - Patched by Root

Root has patched CVE-2025-38194 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38482 CVE-2025-38482 in rootio-linux - Patched by Root

Root has patched CVE-2025-38482 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure

Impact The toabsolutenormalizedpath function security.lua:28-43 does not collapse redundant path separators // → /. On Linux, //etc/passwd is equivalent to /etc/passwd POSIX path semantics, but iscriticalpath fails to match the double-slash variant because //etc/passwd does not start with /etc/...

ROOT-OS-DEBIAN-13-CVE-2026-22998 CVE-2026-22998 in rootio-linux - Patched by Root

Root has patched CVE-2026-22998 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-24515 CVE-2026-24515 in rootio-expat - Patched by Root

Root has patched CVE-2026-24515 in the rootio-expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-38425 CVE-2025-38425 in rootio-linux - Patched by Root

Root has patched CVE-2025-38425 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2024-36898 CVE-2024-36898 in rootio-linux - Patched by Root

Root has patched CVE-2024-36898 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-46214 CVE-2026-46214 in rootio-linux - Patched by Root

Root has patched CVE-2026-46214 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-68286 CVE-2025-68286 in rootio-linux - Patched by Root

Root has patched CVE-2025-68286 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...