ROOT-OS-DEBIAN-11-CVE-2026-7168 CVE-2026-7168 in curl - Patched by Root

Root has patched CVE-2026-7168 in the curl package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-31344 CVE-2025-31344 in giflib - Patched by Root

Root has patched CVE-2025-31344 in the giflib package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-42250 CVE-2026-42250 in bzip2 - Patched by Root

Root has patched CVE-2026-42250 in the bzip2 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-34197 CVE-2026-34197 in activemq - Patched by Root

Root has patched CVE-2026-34197 in the activemq package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-56209 CVE-2026-56209 in aom - Patched by Root

Root has patched CVE-2026-56209 in the aom package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-56210 CVE-2026-56210 in aom - Patched by Root

Root has patched CVE-2026-56210 in the aom package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-6879 CVE-2023-6879 in aom - Patched by Root

Root has patched CVE-2023-6879 in the aom package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-49582 CVE-2023-49582 in apr - Patched by Root

Root has patched CVE-2023-49582 in the apr package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-54369 CVE-2026-54369 in acl - Patched by Root

Root has patched CVE-2026-54369 in the acl package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-54370 CVE-2026-54370 in acl - Patched by Root

Root has patched CVE-2026-54370 in the acl package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-68972 CVE-2025-68972 in gnupg2 - Patched by Root

Root has patched CVE-2025-68972 in the gnupg2 package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-40908 CVE-2025-40908 in libyaml-libyaml-perl - Patched by Root

Root has patched CVE-2025-40908 in the libyaml-libyaml-perl package for Root:Debian:11. Multiple fixed versions available...

PT-2026-78938

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions prior to 2.33.4 n8n versions prior to 2.34.1 Description An authenticated user with permissions to create and execute workflows can achieve a sandbox escape within the JavaScript Code node. This occu...

PT-2026-79092

Name of the Vulnerable Software and Affected Versions django CMS versions prior to 5.0.8 Description The render object structure function in cms/views.py renders cms/toolbar/structure.html for a PageContent object without verifying permissions via the user can view page function. When CMS...

PT-2026-79260

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.1 Description The URLS regular expression in nltk/tokenize/casual.py, which is compiled into TweetTokenizer.WORD RE and used by TweetTokenizer.tokenize, contains an unbounded domain-label prefix. When processing inp...

PT-2026-79139

Name of the Vulnerable Software and Affected Versions @dicebear/core versions prior to 9.4.3 @dicebear/initials versions prior to 9.4.3 Description An issue exists where certain options are interpolated into SVG attributes without XML escaping. In @dicebear/core, the addRotate function fails to...

PT-2026-79108

Name of the Vulnerable Software and Affected Versions Frappe versions prior to 15.115.0 Frappe versions prior to 16.27.0 Description The public request-data web form and the PersonalDataDownloadRequest class in frappe/website/doctype/personal data download request/personal data download request.p...

PT-2026-79183

BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton exposed /bigbluebutton/api/handleJoinExistingUser through bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy. A requester able to supply an existingUserID for an active...

CVE-2026-63123

In TinaCMS CLI before 2.5.2, the Vite dev server CORS handler returns false for disallowed origins without rejecting the request, allowing cross-origin POST /media/upload/* to write attacker-controlled files into the dev server's media root. A remote attacker exploits this by luring a developer t...

CVE-2026-53542

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the archive creation endpoint in src/backend/ssh/file-manager.ts passes selected file basenames to tar without an end-of-options marker and without making the operands...