616687 matches found
ROOT-APP-NPM-CVE-2025-59471 CVE-2025-59471 in next - Patched by Root
Root has patched CVE-2025-59471 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10756 AIKIDO-2026-10756 in next - Patched by Root
Root has patched AIKIDO-2026-10756 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-Q4GF-8MX6-V5V3 GHSA-q4gf-8mx6-v5v3 in next - Patched by Root
Root has patched GHSA-q4gf-8mx6-v5v3 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-MWV6-3258-Q52C GHSA-mwv6-3258-q52c in next - Patched by Root
Root has patched GHSA-mwv6-3258-q52c in the next package for Root:npm. Multiple fixed versions available...
CVE-2026-63278 Package URLs can be used to exfiltrate arbitrary INI file values and environment variables
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not recognise every way of naming the package content...
EUVD-2026-84357
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not recognise every way of naming the package content...
CVE-2026-63278 Package URLs can be used to exfiltrate arbitrary INI file values and environment variables
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not recognise every way of naming the package content...
CVE-2026-63278
LibreOffice is affected by an information-disclosure vulnerability in its package URL handling . The check introduced for CVE-2024-12426 did not recognize every naming variation of the package content provider , allowing a crafted URL to still reach the expansion logic and exfiltrate environment ...
ROOT-APP-PYPI-CVE-2024-37891 CVE-2024-37891 in urllib3 - Patched by Root
Root has patched CVE-2024-37891 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-66471 CVE-2025-66471 in urllib3 - Patched by Root
Root has patched CVE-2025-66471 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-3F7W-8RR8-F37F GHSA-3f7w-8rr8-f37f in GitPython - Patched by Root
Root has patched GHSA-3f7w-8rr8-f37f in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-JM78-9FVV-MHGR GHSA-jm78-9fvv-mhgr in GitPython - Patched by Root
Root has patched GHSA-jm78-9fvv-mhgr in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-956X-8GVW-WG5V GHSA-956x-8gvw-wg5v in GitPython - Patched by Root
Root has patched GHSA-956x-8gvw-wg5v in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-FJR4-X663-MWXC GHSA-fjr4-x663-mwxc in GitPython - Patched by Root
Root has patched GHSA-fjr4-x663-mwxc in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-WVPP-8HX9-P66J GHSA-wvpp-8hx9-p66j in GitPython - Patched by Root
Root has patched GHSA-wvpp-8hx9-p66j in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-P538-C434-8V24 GHSA-p538-c434-8v24 in GitPython - Patched by Root
Root has patched GHSA-p538-c434-8v24 in the GitPython package for Root:PyPI. Multiple fixed versions available...
CVE-2026-25264
Privilege escalation due to weak configuration during package extraction process...
CVE-2026-25264
Qualcomm Software Center is affected by an uncontrolled search path element vulnerability arising from weak configuration during its package extraction process. A local user with low privileges can exploit this to escalate privileges, with changed scope and high impact on confidentiality, integri...