4891 matches found
ROOT-APP-NPM-CVE-2026-44495 CVE-2026-44495 in axios - Patched by Root
Root has patched CVE-2026-44495 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44488 CVE-2026-44488 in axios - Patched by Root
Root has patched CVE-2026-44488 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-42H9-826W-CGV3 GHSA-42h9-826w-cgv3 in axios - Patched by Root
Root has patched GHSA-42h9-826w-cgv3 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-MWF2-3PR3-8698 GHSA-mwf2-3pr3-8698 in axios - Patched by Root
Root has patched GHSA-mwf2-3pr3-8698 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-40175 CVE-2026-40175 in axios - Patched by Root
Root has patched CVE-2026-40175 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-42041 CVE-2026-42041 in axios - Patched by Root
Root has patched CVE-2026-42041 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-42036 CVE-2026-42036 in axios - Patched by Root
Root has patched CVE-2026-42036 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44487 CVE-2026-44487 in axios - Patched by Root
Root has patched CVE-2026-44487 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44496 CVE-2026-44496 in axios - Patched by Root
Root has patched CVE-2026-44496 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-MMX7-HFXF-JPPX GHSA-mmx7-hfxf-jppx in axios - Patched by Root
Root has patched GHSA-mmx7-hfxf-jppx in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-JQH4-M9W3-8HP9 GHSA-jqh4-m9w3-8hp9 in axios - Patched by Root
Root has patched GHSA-jqh4-m9w3-8hp9 in the axios package for Root:npm. Multiple fixed versions available...
CVE-2026-77067
The setWebhookResolver in packages/api/src/resolvers/webhooks/index.ts stores the caller-supplied url without any address validation, and the file imports no validation helper. When a subscribed event fires, callWebhook in packages/api/src/jobs/callwebhook.ts issues axios.request with that url, t...
CVE-2026-77067
Omnivore (open-source app) is vulnerable to a stored SSRF via the setWebhookResolver in packages/api/src/resolvers/webhooks/index.ts. The resolver stores a caller-supplied URL without any address validation. When a subscribed event fires, callWebhook issues an axios.request to that URL with the r...
CVE-2026-77066 Omnivore Server-Side Request Forgery via the scanFeeds GraphQL Query
The scanFeedsResolver in packages/api/src/resolvers/subscriptions/index.ts passes the caller-supplied url straight to axios.geturl, rssParserConfig with no address validation. The same file guards the subscribe path with validateUrl, which rejects private and reserved ranges through the private-i...
ROOT-APP-NPM-AIKIDO-2026-10819 AIKIDO-2026-10819 in axios - Patched by Root
Root has patched AIKIDO-2026-10819 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10820 AIKIDO-2026-10820 in axios - Patched by Root
Root has patched AIKIDO-2026-10820 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10509 AIKIDO-2026-10509 in axios - Patched by Root
Root has patched AIKIDO-2026-10509 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10823 AIKIDO-2026-10823 in axios - Patched by Root
Root has patched AIKIDO-2026-10823 in the axios package for Root:npm. Multiple fixed versions available...