ROOT-OS-DEBIAN-12-CVE-2025-47917 CVE-2025-47917 in mbedtls - Patched by Root

Root has patched CVE-2025-47917 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-35728 CVE-2020-35728 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-35728 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-36179 CVE-2020-36179 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-36179 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38584 CVE-2025-38584 in linux - Patched by Root

Root has patched CVE-2025-38584 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-48887 CVE-2022-48887 in linux - Patched by Root

Root has patched CVE-2022-48887 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-48623 CVE-2022-48623 in libcpanel-json-xs-perl - Patched by Root

Root has patched CVE-2022-48623 in the libcpanel-json-xs-perl package for Root:Debian:11. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-39338 CVE-2024-39338 in axios - Patched by Root

Root has patched CVE-2024-39338 in the axios package for Root:npm. Multiple fixed versions available...

CLSA-2026-1776904642 TuxCare security update for debug (1 CVE)

TuxCare rebuilt debug to address 1 CVE. Fixed in 4.4.3-tuxcare.1...

CLSA-2025-1762474360 TuxCare security update for twisted (4 CVEs)

TuxCare rebuilt twisted to address 4 CVEs. Fixed in 20.3.0.post4+tuxcare...

CLEANSTART-2026-VP41831 Security fixes in airflow-2 2.11.0-r2

Package airflow-2 version 2.11.0-r2 fixes 2 vulnerabilities: CVE-2026-44503, ghsa-7j59-v9qr-6fq9...

CLEANSTART-2026-FD75698 Security fixes in patch 2.7.6-r2

Package patch version 2.7.6-r2 fixes 1 vulnerabilities: CVE-2018-6951...

ROOT-APP-NPM-CVE-2026-47673 CVE-2026-47673 in @rootio/hono - Patched by Root

Root has patched CVE-2026-47673 in the @rootio/hono package for Root:npm. Multiple fixed versions available...

UBUNTU-CVE-2026-64090

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid empty VLAN responses The commit 16116dac2339 "batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs" added checks to the local direct TT response code. But the response can also be done...

UBUNTU-CVE-2026-53371

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: bound nodedesc sysfs read with %.64s nodedesc64 in struct ibdevice is not guaranteed to be NUL- terminated. The core IB sysfs handler uses "%.64s" for exactly this reason drivers/infiniband/core/sysfs.c:1307, since...

ROOT-APP-NPM-NSWG-ECO-516 NSWG-ECO-516 in @rootio/lodash - Patched by Root

Root has patched NSWG-ECO-516 in the @rootio/lodash package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-12064 CVE-2026-12064 in rootio-curl - Patched by Root

Root has patched CVE-2026-12064 in the rootio-curl package for Root:Debian:11. Multiple fixed versions available...

PYSEC-2026-3045 Malciously crafted QPY files can allows Remote Attackers to Cause Denial of Service in Qiskit

Impact A maliciously crafted QPY file containing a malformed symengine serialization stream as part of the larger QPY serialization of a ParameterExpression object can cause a segfault within the symengine library, allowing an attacker to terminate the hosting process deserializing the QPY payloa...

RHSA-2026:36617 Red Hat Security Advisory: oci-seccomp-bpf-hook security update

Bulletin has no description...

PYSEC-2026-1241 ChangeDetection.io XSS in watch overview

Impact XSS - Errors in filters from website page change detection watches were not being filtered. Patches 0.50.4...

Important: python3.14

Issue Overview: tarfile.extractall with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself. The extraction fallback validated the symlink at it's archived location but recreated it at the...