ROOT-APP-NPM-CVE-2026-13676 CVE-2026-13676 in fast-uri - Patched by Root

Root has patched CVE-2026-13676 in the fast-uri package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-64647 CVE-2026-64647 in next - Patched by Root

Root has patched CVE-2026-64647 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-57752 CVE-2025-57752 in next - Patched by Root

Root has patched CVE-2025-57752 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10758 AIKIDO-2026-10758 in next - Patched by Root

Root has patched AIKIDO-2026-10758 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44581 CVE-2026-44581 in next - Patched by Root

Root has patched CVE-2026-44581 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10757 AIKIDO-2026-10757 in next - Patched by Root

Root has patched AIKIDO-2026-10757 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2024-10173 AIKIDO-2024-10173 in next - Patched by Root

Root has patched AIKIDO-2024-10173 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-47831 CVE-2024-47831 in next - Patched by Root

Root has patched CVE-2024-47831 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-59471 CVE-2025-59471 in next - Patched by Root

Root has patched CVE-2025-59471 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-57822 CVE-2025-57822 in next - Patched by Root

Root has patched CVE-2025-57822 in the next package for Root:npm. Multiple fixed versions available...

CVE-2026-40345

creationtimestamp| type| source ---|---|--- 2026-08-17 14:35:03+00:00| published-proof-of-concept| https://github.com/RebeccaStevens/deepmerge-ts/security/advisories/GHSA-ggr8-5vv4-36mx 2026-08-17 18:00:03+00:00| seen| Telegram/S7eqLraqEg6Kwu3Kw8cANfzCQgkQhswVCeNeKxsnaOowjNQ 2026-08-18...

NPM: DeepmergeTS has stack exhaustion when merging recursive object graphs

NPM: DeepmergeTS has stack exhaustion when merging recursive object graphs vulnerability discovered by ? in WordPress Npm deepmerge-ts versions 8.0.0...

CVE-2026-19693 extract-zip arbitrary file write outside the destination directory via a symlink at the final path component

extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination, followed by a regular file - writes through t...

ROOT-APP-NPM-GHSA-GV7W-RQVM-QJHR GHSA-gv7w-rqvm-qjhr in esbuild - Patched by Root

Root has patched GHSA-gv7w-rqvm-qjhr in the esbuild package for Root:npm. Multiple fixed versions available...

Malicious code in sugarball-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e600e0ab4f99d726e508d2ad82425ab2bc06f141c333dfecf0bdba9edd66f6d3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14111 Malicious code in sugarball-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e600e0ab4f99d726e508d2ad82425ab2bc06f141c333dfecf0bdba9edd66f6d3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

ROOT-APP-NPM-CVE-2021-3807 CVE-2021-3807 in ansi-regex - Patched by Root

Root has patched CVE-2021-3807 in the ansi-regex package for Root:npm. Multiple fixed versions available...

MAL-2026-14106 Malicious code in cloud-agen-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e57cfebf30bc4f71b96f08b04b1d0b7a0af0a7f32d11033a2c186e7692333e notify.js exports send, sendFile, sendPhoto, and log helpers that POST caller-supplied content to api.telegram.org using a hardcoded bot token and a...

Malicious code in cloud-agen-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e57cfebf30bc4f71b96f08b04b1d0b7a0af0a7f32d11033a2c186e7692333e notify.js exports send, sendFile, sendPhoto, and log helpers that POST caller-supplied content to api.telegram.org using a hardcoded bot token and a...

Malicious code in a.poltoradnev-package-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d1659d9d1386305bd1c623cc2e3643375f4e14ad279ece4f3df684ecd53ab5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...