ROOT-OS-DEBIAN-11-CVE-2026-1502 CVE-2026-1502 in python3.9 - Patched by Root

Root has patched CVE-2026-1502 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-27980 CVE-2026-27980 in next - Patched by Root

Root has patched CVE-2026-27980 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-27979 CVE-2026-27979 in next - Patched by Root

Root has patched CVE-2026-27979 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-27977 CVE-2026-27977 in next - Patched by Root

Root has patched CVE-2026-27977 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-Q4GF-8MX6-V5V3 GHSA-q4gf-8mx6-v5v3 in next - Patched by Root

Root has patched GHSA-q4gf-8mx6-v5v3 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-29057 CVE-2026-29057 in next - Patched by Root

Root has patched CVE-2026-29057 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-5889 CVE-2025-5889 in brace-expansion - Patched by Root

Root has patched CVE-2025-5889 in the brace-expansion package for Root:npm. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-27026 CVE-2026-27026 in pypdf - Patched by Root

Root has patched CVE-2026-27026 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-28351 CVE-2026-28351 in pypdf - Patched by Root

Root has patched CVE-2026-28351 in the pypdf package for Root:PyPI. Multiple fixed versions available...

CVE-2026-56847 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-41187 vulnerabilities

Vulnerabilities for packages: calico-fips...

CVE-2026-12261

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

Malicious code in fastapii (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf67e733322de0ce3d08269697e6ccd9460233319cadd5f97f05c8d1e855665a fastapii 0.1.2 is a single-character typosquat of the popular fastapi package. Its setup.py registers a custom setuptools install cmdclass LinuxInsta...

ROOT-OS-ALPINE-321-CVE-2026-6846 CVE-2026-6846 in binutils - Patched by Root

Root has patched CVE-2026-6846 in the binutils package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2025-69649 CVE-2025-69649 in binutils - Patched by Root

Root has patched CVE-2025-69649 in the binutils package for Root:Alpine:3.21. Multiple fixed versions available...

MGASA-2026-0326 Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fix various security issues. See the links to get complete information of each issue...

Updated rootcerts, nss & firefox packages fix security vulnerabilities

Updated rootcerts, nss & firefox packages fixes various vulnerabilities. Please see the links for detailed information of each one...

EUVD-2026-54393

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

CVE-2026-12261

The CVE concerns nltk.downloader in nltk/nltk ≤ 3.9.4. The downloader extracts package archives into shared namespaces (corpora/ and taggers/) instead of package-isolated roots and validates integrity only after extraction. This design flaw enables one package to overwrite another package’s trust...

CVE-2026-12261 Improper Access Control in nltk/nltk

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...