ROOT-APP-PYPI-CVE-2026-42215 CVE-2026-42215 in GitPython - Patched by Root

Root has patched CVE-2026-42215 in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-53176 CVE-2026-53176 in linux - Patched by Root

Root has patched CVE-2026-53176 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-52590 CVE-2023-52590 in linux - Patched by Root

Root has patched CVE-2023-52590 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-43072 CVE-2026-43072 in linux - Patched by Root

Root has patched CVE-2026-43072 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-49531 CVE-2022-49531 in linux - Patched by Root

Root has patched CVE-2022-49531 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38022 CVE-2025-38022 in linux - Patched by Root

Root has patched CVE-2025-38022 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-44958 CVE-2024-44958 in linux - Patched by Root

Root has patched CVE-2024-44958 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-69227 CVE-2025-69227 in aiohttp - Patched by Root

Root has patched CVE-2025-69227 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-48379 CVE-2025-48379 in pillow - Patched by Root

Root has patched CVE-2025-48379 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2024-49937 CVE-2024-49937 in linux - Patched by Root

Root has patched CVE-2024-49937 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-68322 CVE-2025-68322 in rootio-linux - Patched by Root

Root has patched CVE-2025-68322 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application servers through crafted image uploads. Tracked as CVE-2026-66066 CVSS score: 9.5, the flaw can expose the Rails process environment and secre...

ROOT-OS-UBUNTU-2404-CVE-2025-39894 CVE-2025-39894 in rootio-linux - Patched by Root

Root has patched CVE-2025-39894 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-40283 CVE-2025-40283 in rootio-linux - Patched by Root

Root has patched CVE-2025-40283 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43169 CVE-2026-43169 in rootio-linux - Patched by Root

Root has patched CVE-2026-43169 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-23468 CVE-2026-23468 in rootio-linux - Patched by Root

Root has patched CVE-2026-23468 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-21875 CVE-2025-21875 in rootio-linux - Patched by Root

Root has patched CVE-2025-21875 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

GHSA-PF2Q-PXHF-HGMW n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base Directory

Impact The component @n8n/computer-use file-search tool confined searches to a configured base directory. A crafted search pattern could bypass the confinement check and expand to locations outside that directory, causing the tool to return the names and contents of files anywhere the daemon's OS...

GHSA-GV7G-JM28-CR3M n8n: Expression sandbox escape via arrow-function bodies enabling command execution

Impact An authenticated user with permission to create or modify workflows could abuse crafted expressions using arrow functions to bypass the expression sandbox, triggering unintended system command execution on the host running n8n. Patches The issue has been fixed in n8n versions 2.31.5 and...

EUVD-2026-46278

PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, spidertools URL validation can be bypassed using alternate loopback host encodings. The tool contains a URL validation function intended to block local or unsafe...