CVE-2025-71388

CVE-2025-71388 affects stoatchat (delta/Revolt) versions from 20241213-1 up to before 20250210-1. The issue stems from the webhook fetch endpoint checking ViewChannel (read) instead of ManageWebhooks, allowing users with only channel read permission to retrieve the channel’s webhooks and their to...

CVE-2025-71388 stoatchat 20241213-1 Webhook Token Disclosure via Read Permissions

stoatchat delta/Revolt versions from 20241213-1 before 20250210-1 allow users with only ViewChannel read permission on a channel to fetch that channel's webhooks, including their tokens, because the webhook fetch endpoint checked for ViewChannel instead of ManageWebhooks. Using a retrieved token,...

ROOT-APP-NPM-CVE-2025-66414 CVE-2025-66414 in @rootio/modelcontextprotocol__sdk - Patched by Root

Root has patched CVE-2025-66414 in the @rootio/modelcontextprotocolsdk package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-47166 CVE-2026-47166 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-47166 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-49218 CVE-2026-49218 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-49218 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-46523 CVE-2026-46523 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-46523 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-56368 CVE-2026-56368 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-56368 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-56361 CVE-2026-56361 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-56361 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-56370 CVE-2026-56370 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-56370 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-46521 CVE-2026-46521 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-46521 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-25983 CVE-2026-25983 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-25983 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-33536 CVE-2026-33536 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-33536 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-33899 CVE-2026-33899 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-33899 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-1225 CVE-2026-1225 in io.root.ch.qos.logback:logback-core - Patched by Root

Root has patched CVE-2026-1225 in the io.root.ch.qos.logback:logback-core package for Root:Maven. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-40909 CVE-2025-40909 in rootio-perl - Patched by Root

Root has patched CVE-2025-40909 in the rootio-perl package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-4800 CVE-2026-4800 in @rootio/lodash - Patched by Root

Root has patched CVE-2026-4800 in the @rootio/lodash package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-21509 CVE-2024-21509 in @rootio/mysql2 - Patched by Root

Root has patched CVE-2024-21509 in the @rootio/mysql2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-21507 CVE-2024-21507 in @rootio/mysql2 - Patched by Root

Root has patched CVE-2024-21507 in the @rootio/mysql2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-21680 CVE-2022-21680 in @rootio/marked - Patched by Root

Root has patched CVE-2022-21680 in the @rootio/marked package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-6485 CVE-2024-6485 in @rootio/bootstrap - Patched by Root

Root has patched CVE-2024-6485 in the @rootio/bootstrap package for Root:npm. Multiple fixed versions available...