ROOT-APP-NPM-CVE-2023-30547 CVE-2023-30547 in vm2 - Patched by Root

Root has patched CVE-2023-30547 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47209 CVE-2026-47209 in vm2 - Patched by Root

Root has patched CVE-2026-47209 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24781 CVE-2026-24781 in vm2 - Patched by Root

Root has patched CVE-2026-24781 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-V836-6XW4-9CX3 GHSA-v836-6xw4-9cx3 in vm2 - Patched by Root

Root has patched GHSA-v836-6xw4-9cx3 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47139 CVE-2026-47139 in vm2 - Patched by Root

Root has patched CVE-2026-47139 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44007 CVE-2026-44007 in vm2 - Patched by Root

Root has patched CVE-2026-44007 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-26332 CVE-2026-26332 in vm2 - Patched by Root

Root has patched CVE-2026-26332 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-OS-ALPINE-315-CVE-2025-64720 CVE-2025-64720 in libpng - Patched by Root

Root has patched CVE-2025-64720 in the libpng package for Root:Alpine:3.15. Multiple fixed versions available...

CVE-2026-103106

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker to be able to run arbitrary code on a node by eithe...

CVE-2026-103106

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker to be able to run arbitrary code on a node by eithe...

CVE-2026-103106

Pexip Infinity versions prior to 38.2 , as well as versions 39.0 , 39.1 , and 40.0 , are vulnerable to a privilege escalation flaw. The root cause is improper input validation within an internal Pexip Infinity service. An attacker with local access can escalate privileges to root , provided they ...

EUVD-2026-89583

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker to be able to run arbitrary code on a node by eithe...

CVE-2026-103106

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker to be able to run arbitrary code on a node by eithe...

CVE-2026-103056

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrikertr.py and endpoint.py. Authenticated users can inject single quotes into...

CLEANSTART-2026-DQ91908 On Linux, if the target of Root

Security vulnerability affects the minio-operator package. On Linux, if the target of Root...

EUVD-2026-89467

The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock done function disables signature verification in the OPKG configuration before restoring optional packages from a writable, unsigned feed...

EUVD-2026-89466

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update...

CVE-2026-103056 AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrikertr.py and endpoint.py. Authenticated users can inject single quotes into...

CVE-2026-103056 AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrikertr.py and endpoint.py. Authenticated users can inject single quotes into...

CVE-2026-103056

AiSOC versions 7.2.0 before 12.0.0 are vulnerable to a command injection vulnerability within the actions service. The flaw exists because the application builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrike_rtr.py and endpoint.py. Auth...