13388 matches found
ROOT-APP-NPM-CVE-2026-34043 CVE-2026-34043 in @rootio/serialize-javascript - Patched by Root
Root has patched CVE-2026-34043 in the @rootio/serialize-javascript package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-47934 CVE-2025-47934 in @rootio/openpgp - Patched by Root
Root has patched CVE-2025-47934 in the @rootio/openpgp package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2016-4055 CVE-2016-4055 in @rootio/moment - Patched by Root
Root has patched CVE-2016-4055 in the @rootio/moment package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-37620 CVE-2022-37620 in @rootio/html-minifier - Patched by Root
Root has patched CVE-2022-37620 in the @rootio/html-minifier package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-50537 CVE-2025-50537 in @rootio/eslint - Patched by Root
Root has patched CVE-2025-50537 in the @rootio/eslint package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2016-1000223 CVE-2016-1000223 in @rootio/jws - Patched by Root
Root has patched CVE-2016-1000223 in the @rootio/jws package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-46625 CVE-2026-46625 in @rootio/js-cookie - Patched by Root
Root has patched CVE-2026-46625 in the @rootio/js-cookie package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2020-15084 CVE-2020-15084 in @rootio/express-jwt - Patched by Root
Root has patched CVE-2020-15084 in the @rootio/express-jwt package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-21538 CVE-2024-21538 in @rootio/cross-spawn - Patched by Root
Root has patched CVE-2024-21538 in the @rootio/cross-spawn package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-38900 CVE-2022-38900 in @rootio/decode-uri-component - Patched by Root
Root has patched CVE-2022-38900 in the @rootio/decode-uri-component package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-RVG8-PWQ2-XJ7Q GHSA-rvg8-pwq2-xj7q in @rootio/base64url - Patched by Root
Root has patched GHSA-rvg8-pwq2-xj7q in the @rootio/base64url package for Root:npm. Multiple fixed versions available...
BASM (Broken Authentication & Session Management) org.apache.tomcat:tomcat-catalina Dependency in Jira Software Data Center and Server
This is a vulnerability in a non-Atlassian dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity BASM Broken Authentication & Session Management vulnerability was introduced in versions 9.12.1, 9.16.0, 9.17.0, 10.0.1, 10.1.1,...
DoS (Denial of Service) org.apache.tomcat:tomcat-catalina Dependency in Jira Software Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 9.12.1, 9.16.0, 9.17.0, 10.0.1, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of...
CVE-2026-41178
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes Parse to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via oversized inputs. Versions 1.42.0 and 1.44.0 fix the issue...
CVE-2026-41178 OpenTelemetry-Go's baggage parsing no longer caps raw header length
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes Parse to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via oversized inputs. Versions 1.42.0 and 1.44.0 fix the issue...
ROOT-APP-PYPI-GHSA-FV5P-P927-QMXR GHSA-fv5p-p927-qmxr in rootio-langchain-text-splitters - Patched by Root
Root has patched GHSA-fv5p-p927-qmxr in the rootio-langchain-text-splitters package for Root:PyPI. Multiple fixed versions available...
SUSE CVE-2026-42043
Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 range other than 127.0.0.1 to completely bypass the NOPROXY protection. This vulnerability is due t...
PT-2026-49120
Root has patched GHSA-6x33-pw7p-hmpq in the @rootio/http-proxy package for Root:npm. Multiple fixed versions available...