ROOT-APP-NUGET-CVE-2025-26646 CVE-2025-26646 in Microsoft.Build.Tasks.Core - Patched by Root

Root has patched CVE-2025-26646 in the Microsoft.Build.Tasks.Core package for Root:NuGet. Multiple fixed versions available...

ROOT-APP-NUGET-CVE-2025-55247 CVE-2025-55247 in Microsoft.Build.Utilities.Core - Patched by Root

Root has patched CVE-2025-55247 in the Microsoft.Build.Utilities.Core package for Root:NuGet. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-39244 CVE-2026-39244 in adm-zip - Patched by Root

Root has patched CVE-2026-39244 in the adm-zip package for Root:npm. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-42004 CVE-2022-42004 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2022-42004 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

CVE-2026-108951 LavaLite CMS through 10.1.2 Authorization Bypass via User Update API

LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractRequest isWorkflow check. Attackers can send a PATCH request to the user update route with a target identifier to change...

CVE-2026-108951 LavaLite CMS through 10.1.2 Authorization Bypass via User Update API

LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractRequest isWorkflow check. Attackers can send a PATCH request to the user update route with a target identifier to change...

CVE-2026-108951

LavaLite CMS versions through 10.1.2 are vulnerable to an authorization bypass in the user update API. The flaw stems from an improper check within the AbstractRequest isWorkflow() function. This allows authenticated low-privileged users to send a PATCH request to the user update route, using a t...

ROOT-APP-NPM-CVE-2026-64647 CVE-2026-64647 in next - Patched by Root

Root has patched CVE-2026-64647 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-49128 CVE-2025-49128 in com.fasterxml.jackson.core:jackson-core - Patched by Root

Root has patched CVE-2025-49128 in the com.fasterxml.jackson.core:jackson-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-0122 CVE-2022-0122 in node-forge - Patched by Root

Root has patched CVE-2022-0122 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-WXGW-QJ99-44C2 GHSA-wxgw-qj99-44c2 in node-forge - Patched by Root

Root has patched GHSA-wxgw-qj99-44c2 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-48379 CVE-2025-48379 in pillow - Patched by Root

Root has patched CVE-2025-48379 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-56PW-MPJ4-FXWW GHSA-56pw-mpj4-fxww in pillow - Patched by Root

Root has patched GHSA-56pw-mpj4-fxww in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-50447 CVE-2023-50447 in pillow - Patched by Root

Root has patched CVE-2023-50447 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-53486 CVE-2026-53486 in @xhmikosr/decompress - Patched by Root

Root has patched CVE-2026-53486 in the @xhmikosr/decompress package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2023-31486 CVE-2023-31486 in perl - Patched by Root

Root has patched CVE-2023-31486 in the perl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2011-4116 CVE-2011-4116 in perl - Patched by Root

Root has patched CVE-2011-4116 in the perl package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-QPPV-J76H-2RPX GHSA-qppv-j76h-2rpx in tornado - Patched by Root

Root has patched GHSA-qppv-j76h-2rpx in the tornado package for Root:PyPI. Multiple fixed versions available...

CrushFTP VFS - Sandbox Escape LFR

VFS Sandbox Escape in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows remote attackers with low privileges to read files from the filesystem outside of VFS Sandbox. id: CVE-2024-4040 info: name: CrushFTP VFS - Sandbox Escape LFR author: DhiyaneshDK,pussycat0x severity:...

Important: Red Hat Security Advisory: flatpak-builder security update

An update for flatpak-builder is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...