ROOT-APP-NPM-AIKIDO-2026-10741 AIKIDO-2026-10741 in @rootio/axios - Patched by Root

Root has patched AIKIDO-2026-10741 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

EUVD-2025-210494

The The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.6. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This...

Authorization Bypass

PraisonAI Platform is vulnerable to Authorization Bypass. The vulnerability is due to improper authorization of label and issue-label mutations, where attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to alter shared label taxonomy and manipulate issue-label...

ROOT-APP-GOBINARY-CVE-2025-69725 CVE-2025-69725 in rootio-github.com/go-chi/chi/v5 - Patched by Root

Root has patched CVE-2025-69725 in the rootio-github.com/go-chi/chi/v5 package for Root:Go. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-6766 CVE-2026-6766 in rootio-nss - Patched by Root

Root has patched CVE-2026-6766 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-2303 CVE-2026-2303 in rootio-go.mongodb.org/mongo-driver - Patched by Root

Root has patched CVE-2026-2303 in the rootio-go.mongodb.org/mongo-driver package for Root:Go. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2019-16769 CVE-2019-16769 in @rootio/serialize-javascript - Patched by Root

Root has patched CVE-2019-16769 in the @rootio/serialize-javascript package for Root:npm. Multiple fixed versions available...

OPENSUSE-SU-2026:21413-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: - Update golang.org/x/net to v0.57....

ROOT-APP-PYPI-CVE-2024-47081 CVE-2024-47081 in rootio-requests - Patched by Root

Root has patched CVE-2024-47081 in the rootio-requests package for Root:PyPI. Multiple fixed versions available...

Security Bulletin: IBM Sterling Connect:Direct Web Services is Vulnerable to Regular Expression Denial of Service (ReDoS)

Summary spring-core-7.0.7.jar is used by IBM Sterling Connect:Direct Web Services CVE-2026-41848. Vulnerability Details CVEID:CVE-2026-41848 DESCRIPTION: Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an attacker is able to provide a pattern which is then...

CVE-2026-16492 umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection

A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of the file packages/utils/src/getFileGitIno.ts of the component GIT File Helper. This manipulation causes os command injection. The exploit has been made available to the public a...

Photon OS 5.0: Dnsmasq PHSA-2026-5.0-0914

An update of the dnsmasq package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0914. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-63510

Name of the Vulnerable Software and Affected Versions oclif versions prior to 4.23.17 Description An OS command injection issue exists in the JIT Plugin Entry Handler component. A local attacker can manipulate the jitPlugins argument to execute arbitrary commands via the child process.exec...

ALSA-2026:42899 Important: java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fixes: JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance XBM...

SUSE SLED15 / SLES15 Security Update : patch (SUSE-SU-2026:3161-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3161-1 advisory. This update for patch fixes the following issues - CVE-2026-56288: crafted unified-diff patch file can cause...

RHEL 10 : kpatch-patch-6_12_0-211_16_1 (RHSA-2026:43826)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:43826 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This pat...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0927

Updates of 'rubygem-fluentd' packages of Photon OS have been released...

PT-2026-63527

A vulnerability was detected in publint up to 0.1.4. This impacts the function child process.exec of the file src/node/pack.js of the component package-manager Command Handler. The manipulation results in os command injection. Attacking locally is a requirement. The exploit is now public and may ...

PT-2026-63511

Name of the Vulnerable Software and Affected Versions danger danger-js versions prior to 13.0.8 Description An OS command injection issue exists in the CLI component within the danger.git.diffForFile function located in the source/platforms/git/localGetFileAtSHA.ts file. This occurs when the File...

CVE-2026-16488 QUSETIONS MiniCode-Python Project File config.py subprocess.Popen os command injection

A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Popen of the file minicode/config.py of the component Project File Handler. Executing a manipulation can lead to os command injection. The attack may be launched remotely. A high...