ROOT-APP-NPM-CVE-2026-42264 CVE-2026-42264 in axios - Patched by Root

Root has patched CVE-2026-42264 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44488 CVE-2026-44488 in axios - Patched by Root

Root has patched CVE-2026-44488 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-39865 CVE-2026-39865 in axios - Patched by Root

Root has patched CVE-2026-39865 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42036 CVE-2026-42036 in axios - Patched by Root

Root has patched CVE-2026-42036 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42041 CVE-2026-42041 in axios - Patched by Root

Root has patched CVE-2026-42041 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44496 CVE-2026-44496 in axios - Patched by Root

Root has patched CVE-2026-44496 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44487 CVE-2026-44487 in axios - Patched by Root

Root has patched CVE-2026-44487 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-MWF2-3PR3-8698 GHSA-mwf2-3pr3-8698 in axios - Patched by Root

Root has patched GHSA-mwf2-3pr3-8698 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-40175 CVE-2026-40175 in axios - Patched by Root

Root has patched CVE-2026-40175 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-JQH4-M9W3-8HP9 GHSA-jqh4-m9w3-8hp9 in axios - Patched by Root

Root has patched GHSA-jqh4-m9w3-8hp9 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-MMX7-HFXF-JPPX GHSA-mmx7-hfxf-jppx in axios - Patched by Root

Root has patched GHSA-mmx7-hfxf-jppx in the axios package for Root:npm. Multiple fixed versions available...

CVE-2026-77067

The setWebhookResolver in packages/api/src/resolvers/webhooks/index.ts stores the caller-supplied url without any address validation, and the file imports no validation helper. When a subscribed event fires, callWebhook in packages/api/src/jobs/callwebhook.ts issues axios.request with that url, t...

CVE-2026-77067

Omnivore (open-source app) is vulnerable to a stored SSRF via the setWebhookResolver in packages/api/src/resolvers/webhooks/index.ts. The resolver stores a caller-supplied URL without any address validation. When a subscribed event fires, callWebhook issues an axios.request to that URL with the r...

ROOT-APP-NPM-AIKIDO-2026-10820 AIKIDO-2026-10820 in axios - Patched by Root

Root has patched AIKIDO-2026-10820 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10819 AIKIDO-2026-10819 in axios - Patched by Root

Root has patched AIKIDO-2026-10819 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10823 AIKIDO-2026-10823 in axios - Patched by Root

Root has patched AIKIDO-2026-10823 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10509 AIKIDO-2026-10509 in axios - Patched by Root

Root has patched AIKIDO-2026-10509 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-58754 CVE-2025-58754 in axios - Patched by Root

Root has patched CVE-2025-58754 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-27152 CVE-2025-27152 in axios - Patched by Root

Root has patched CVE-2025-27152 in the axios package for Root:npm. Multiple fixed versions available...

CVE-2026-62681

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, an unescaped backtick in an OpenAPI path is emitted into request URL template literals generated for axios, fetch, react-query, and SWR clients without safe encoding. This...