ROOT-OS-DEBIAN-12-CVE-2025-38264 CVE-2025-38264 in rootio-linux - Patched by Root

Root has patched CVE-2025-38264 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-43120 CVE-2026-43120 in rootio-linux - Patched by Root

Root has patched CVE-2026-43120 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-40969 CVE-2024-40969 in rootio-linux - Patched by Root

Root has patched CVE-2024-40969 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-21696 CVE-2025-21696 in rootio-linux - Patched by Root

Root has patched CVE-2025-21696 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-46130 CVE-2026-46130 in rootio-linux - Patched by Root

Root has patched CVE-2026-46130 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-58053 CVE-2024-58053 in rootio-linux - Patched by Root

Root has patched CVE-2024-58053 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38263 CVE-2025-38263 in rootio-linux - Patched by Root

Root has patched CVE-2025-38263 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-23111 CVE-2026-23111 in rootio-linux - Patched by Root

Root has patched CVE-2026-23111 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-52998 CVE-2026-52998 in rootio-linux - Patched by Root

Root has patched CVE-2026-52998 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31415 CVE-2026-31415 in rootio-linux - Patched by Root

Root has patched CVE-2026-31415 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-23137 CVE-2026-23137 in rootio-linux - Patched by Root

Root has patched CVE-2026-23137 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-39990 CVE-2025-39990 in rootio-linux - Patched by Root

Root has patched CVE-2025-39990 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-37741 CVE-2025-37741 in rootio-linux - Patched by Root

Root has patched CVE-2025-37741 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38459 CVE-2025-38459 in rootio-linux - Patched by Root

Root has patched CVE-2025-38459 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-53198 CVE-2026-53198 in rootio-linux - Patched by Root

Root has patched CVE-2026-53198 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-46291 CVE-2026-46291 in rootio-linux - Patched by Root

Root has patched CVE-2026-46291 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-23144 CVE-2025-23144 in rootio-linux - Patched by Root

Root has patched CVE-2025-23144 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-50274

Datadog dd-trace-go (Go client library for Datadog APM/ profiling/ security monitoring) is affected prior to version 2.8.1 due to improper enforcement of DD_TRACE_BAGGAGE_MAX_ITEMS/MAX_BYTES on the baggage header extract path. A remote, unauthenticated attacker can send HTTP requests with an exce...

CVE-2026-54171 Excon: redact additional sensitive/risky headers when following redirects

Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon's RedirectFollower middleware failed to strip additional sensitive headers when following redirects and did not provide a custom list of headers to strip. This could cause inadvertent leakage of sensitive data when the initial...

CVE-2026-48978 oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to internal networks such as...