ROOT-APP-NPM-CVE-2026-53486 CVE-2026-53486 in @rootio/xhmikosr__decompress - Patched by Root

Root has patched CVE-2026-53486 in the @rootio/xhmikosrdecompress package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-52798 CVE-2024-52798 in @rootio/path-to-regexp - Patched by Root

Root has patched CVE-2024-52798 in the @rootio/path-to-regexp package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-48049 CVE-2026-48049 in @rootio/hapi__inert - Patched by Root

Root has patched CVE-2026-48049 in the @rootio/hapiinert package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-48779 CVE-2026-48779 in @rootio/ws - Patched by Root

Root has patched CVE-2026-48779 in the @rootio/ws package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41650 CVE-2026-41650 in @rootio/fast-xml-parser - Patched by Root

Root has patched CVE-2026-41650 in the @rootio/fast-xml-parser package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-R4Q5-VMMM-2653 GHSA-r4q5-vmmm-2653 in @rootio/follow-redirects - Patched by Root

Root has patched GHSA-r4q5-vmmm-2653 in the @rootio/follow-redirects package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-27959 CVE-2026-27959 in @rootio/koa - Patched by Root

Root has patched CVE-2026-27959 in the @rootio/koa package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-33939 CVE-2026-33939 in @rootio/handlebars - Patched by Root

Root has patched CVE-2026-33939 in the @rootio/handlebars package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-4926 CVE-2026-4926 in @rootio/path-to-regexp - Patched by Root

Root has patched CVE-2026-4926 in the @rootio/path-to-regexp package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-3803 CVE-2021-3803 in @rootio/nth-check - Patched by Root

Root has patched CVE-2021-3803 in the @rootio/nth-check package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-11077 AIKIDO-2026-11077 in @rootio/angular__core - Patched by Root

Root has patched AIKIDO-2026-11077 in the @rootio/angularcore package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-34448 CVE-2024-34448 in @rootio/tryghost__members-csv - Patched by Root

Root has patched CVE-2024-34448 in the @rootio/tryghostmembers-csv package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-68613 CVE-2025-68613 in @rootio/n8n - Patched by Root

Root has patched CVE-2025-68613 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44724 CVE-2026-44724 in @rootio/systeminformation - Patched by Root

Root has patched CVE-2026-44724 in the @rootio/systeminformation package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-24785 CVE-2022-24785 in @rootio/moment - Patched by Root

Root has patched CVE-2022-24785 in the @rootio/moment package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-22467 CVE-2023-22467 in @rootio/validator - Patched by Root

Root has patched CVE-2023-22467 in the @rootio/validator package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2015-9235 CVE-2015-9235 in @rootio/jsonwebtoken - Patched by Root

Root has patched CVE-2015-9235 in the @rootio/jsonwebtoken package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-RVG8-PWQ2-XJ7Q GHSA-rvg8-pwq2-xj7q in @rootio/base64url - Patched by Root

Root has patched GHSA-rvg8-pwq2-xj7q in the @rootio/base64url package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24046 CVE-2026-24046 in @rootio/backstage__backend-defaults - Patched by Root

Root has patched CVE-2026-24046 in the @rootio/backstagebackend-defaults package for Root:npm. Multiple fixed versions available...

CVE-2025-59142 [email protected] contains malware after npm account takeover

color-string is a parser and generator for CSS color strings. On 8 September 2025, the npm publishing account for color-string was taken over after a phishing attack. Version 2.1.1 was published, functionally identical to the previous patch version, but with a malware payload added attempting to...