ROOT-APP-NPM-GHSA-67MH-4WV8-2F99 GHSA-67mh-4wv8-2f99 in @rootio/esbuild - Patched by Root

Root has patched GHSA-67mh-4wv8-2f99 in the @rootio/esbuild package for Root:npm. Multiple fixed versions available...

CVE-2026-15185 GPAC MP4Box vobsub.c vobsub_read_idx out-of-bounds

A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsubreadidx of the file /src/mediatools/vobsub.c of the component MP4Box. Executing a manipulation of the argument numlangs can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been...

ROOT-OS-DEBIAN-11-CVE-2026-28421 CVE-2026-28421 in rootio-vim - Patched by Root

Root has patched CVE-2026-28421 in the rootio-vim package for Root:Debian:11. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38827 CVE-2024-38827 in io.root.org.springframework.security:spring-security-core - Patched by Root

Root has patched CVE-2024-38827 in the io.root.org.springframework.security:spring-security-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-QPPV-J76H-2RPX GHSA-qppv-j76h-2rpx in rootio-tornado - Patched by Root

Root has patched GHSA-qppv-j76h-2rpx in the rootio-tornado package for Root:PyPI. Multiple fixed versions available...

PYSEC-2026-1008 `CHECK` fail via inputs in `SparseFillEmptyRowsGrad`

Impact If SparseFillEmptyRowsGrad is given empty inputs, TensorFlow will crash. python import tensorflow as tf tf.rawops.SparseFillEmptyRowsGrad reverseindexmap=, gradvalues=, name=None Patches We have patched the issue in GitHub commit af4a6a3c8b95022c351edae94560acc61253a1b8. The fix will be...

PYSEC-2026-952 Incomplete validation in signal ops leads to crashes in TensorFlow

Impact The tf.compat.v1.signal.rfft2d and tf.compat.v1.signal.rfft3d lack input validation and under certain condition can result in crashes due to CHECK-failures. Patches We have patched the issue in GitHub commit 0a8a781e597b18ead006d19b7d23d0a369e9ad73 merging GitHub PR 55274. The fix will be...

CVE-2026-14801 GPAC TeXML File load_text.c txtin_probe_duration divide by zero

A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtinprobeduration of the file src/filters/loadtext.c of the component TeXML File Handler. Such manipulation of the argument txmltimescale leads to divide by zero. An attack...

ROOT-OS-DEBIAN-13-CVE-2025-40157 CVE-2025-40157 in rootio-linux - Patched by Root

Root has patched CVE-2025-40157 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23250 CVE-2026-23250 in rootio-linux - Patched by Root

Root has patched CVE-2026-23250 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-31542 CVE-2026-31542 in rootio-linux - Patched by Root

Root has patched CVE-2026-31542 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-40313 CVE-2025-40313 in rootio-linux - Patched by Root

Root has patched CVE-2025-40313 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2022-3238 CVE-2022-3238 in rootio-linux - Patched by Root

Root has patched CVE-2022-3238 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23217 CVE-2026-23217 in rootio-linux - Patched by Root

Root has patched CVE-2026-23217 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-71158 CVE-2025-71158 in rootio-linux - Patched by Root

Root has patched CVE-2025-71158 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-37746 CVE-2025-37746 in rootio-linux - Patched by Root

Root has patched CVE-2025-37746 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-40362 CVE-2025-40362 in rootio-linux - Patched by Root

Root has patched CVE-2025-40362 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-38505 CVE-2025-38505 in rootio-linux - Patched by Root

Root has patched CVE-2025-38505 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23053 CVE-2026-23053 in rootio-linux - Patched by Root

Root has patched CVE-2026-23053 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-40079 CVE-2025-40079 in rootio-linux - Patched by Root

Root has patched CVE-2025-40079 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...