606930 matches found
ROOT-APP-NPM-CVE-2025-5889 CVE-2025-5889 in brace-expansion - Patched by Root
Root has patched CVE-2025-5889 in the brace-expansion package for Root:npm. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-27026 CVE-2026-27026 in pypdf - Patched by Root
Root has patched CVE-2026-27026 in the pypdf package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-28351 CVE-2026-28351 in pypdf - Patched by Root
Root has patched CVE-2026-28351 in the pypdf package for Root:PyPI. Multiple fixed versions available...
CVE-2026-56847 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-41187 vulnerabilities
Vulnerabilities for packages: calico-fips...
CVE-2026-12261
A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...
Malicious code in fastapii (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf67e733322de0ce3d08269697e6ccd9460233319cadd5f97f05c8d1e855665a fastapii 0.1.2 is a single-character typosquat of the popular fastapi package. Its setup.py registers a custom setuptools install cmdclass LinuxInsta...
ROOT-OS-ALPINE-321-CVE-2026-6846 CVE-2026-6846 in binutils - Patched by Root
Root has patched CVE-2026-6846 in the binutils package for Root:Alpine:3.21. Multiple fixed versions available...
ROOT-OS-ALPINE-321-CVE-2025-69649 CVE-2025-69649 in binutils - Patched by Root
Root has patched CVE-2025-69649 in the binutils package for Root:Alpine:3.21. Multiple fixed versions available...
MGASA-2026-0326 Updated thunderbird packages fix security vulnerabilities
Updated thunderbird packages fix various security issues. See the links to get complete information of each issue...
Updated rootcerts, nss & firefox packages fix security vulnerabilities
Updated rootcerts, nss & firefox packages fixes various vulnerabilities. Please see the links for detailed information of each one...
EUVD-2026-54393
A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...
CVE-2026-12261
The CVE concerns nltk.downloader in nltk/nltk ≤ 3.9.4. The downloader extracts package archives into shared namespaces (corpora/ and taggers/) instead of package-isolated roots and validates integrity only after extraction. This design flaw enables one package to overwrite another package’s trust...
CVE-2026-12261 Improper Access Control in nltk/nltk
A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...
ROOT-OS-DEBIAN-13-CVE-2025-40343 CVE-2025-40343 in linux - Patched by Root
Root has patched CVE-2025-40343 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-39679 CVE-2025-39679 in linux - Patched by Root
Root has patched CVE-2025-39679 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-68227 CVE-2025-68227 in linux - Patched by Root
Root has patched CVE-2025-68227 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-23448 CVE-2026-23448 in linux - Patched by Root
Root has patched CVE-2026-23448 in the linux package for Root:Debian:13. Multiple fixed versions available...