Symfony HttpFoundation - Access Control Bypass via PATH_INFO

Symfony HttpFoundation component = 2.0.0 and prior to versions 5.4.50, 6.4.29, and 7.3.7 contains an access control bypass vulnerability. The Request class improperly interprets some PATHINFO values, producing URL paths without a leading /. This allows bypassing access control rules that are buil...

Vite Dev Server - Directory Traversal

Vite is a modern frontend build tool. In Vite prior to versions 6.4.3, 6.3.4, and 5.4.23, a directory traversal vulnerability affects the Vite development server. When the Vite dev server is launched with the --host or server.host option, an unauthenticated attacker can craft a request with a pat...

MOVEit Transfer - SQL Injection

In Progress MOVEit Transfer before 2021.0.8 13.0.8, 2021.1.6 13.1.6, 2022.0.6 14.0.6, 2022.1.7 14.1.7, and 2023.0.3 15.0.3, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit...

ROOT-APP-MAVEN-AIKIDO-2026-11158 AIKIDO-2026-11158 in org.springframework:spring-core - Patched by Root

Root has patched AIKIDO-2026-11158 in the org.springframework:spring-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38819 CVE-2024-38819 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2024-38819 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-41249 CVE-2025-41249 in org.springframework:spring-core - Patched by Root

Root has patched CVE-2025-41249 in the org.springframework:spring-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-22243 CVE-2024-22243 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-22243 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2016-1000027 CVE-2016-1000027 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2016-1000027 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-42506 CVE-2026-42506 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-42506 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-25681 CVE-2026-25681 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-25681 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-39821 CVE-2026-39821 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-39821 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-33814 CVE-2026-33814 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-33814 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-27148 CVE-2026-27148 in storybook - Patched by Root

Root has patched CVE-2026-27148 in the storybook package for Root:npm. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2023-20860 CVE-2023-20860 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2023-20860 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-41080 CVE-2026-41080 in expat - Patched by Root

Root has patched CVE-2026-41080 in the expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-24051 CVE-2026-24051 in go.opentelemetry.io/otel/sdk - Patched by Root

Root has patched CVE-2026-24051 in the go.opentelemetry.io/otel/sdk package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-39883 CVE-2026-39883 in go.opentelemetry.io/otel/sdk - Patched by Root

Root has patched CVE-2026-39883 in the go.opentelemetry.io/otel/sdk package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2025-22868 CVE-2025-22868 in golang.org/x/oauth2 - Patched by Root

Root has patched CVE-2025-22868 in the golang.org/x/oauth2 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-1229 CVE-2026-1229 in github.com/cloudflare/circl - Patched by Root

Root has patched CVE-2026-1229 in the github.com/cloudflare/circl package for Root:Go. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-6345 CVE-2024-6345 in setuptools - Patched by Root

Root has patched CVE-2024-6345 in the setuptools package for Root:PyPI. Multiple fixed versions available...