ROOT-APP-NPM-GHSA-WQVQ-JVPQ-H66F GHSA-wqvq-jvpq-h66f in nodemailer - Patched by Root

Root has patched GHSA-wqvq-jvpq-h66f in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-29074 CVE-2026-29074 in svgo - Patched by Root

Root has patched CVE-2026-29074 in the svgo package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-2379 CVE-2024-2379 in curl - Patched by Root

Root has patched CVE-2024-2379 in the curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-9547 CVE-2026-9547 in curl - Patched by Root

Root has patched CVE-2026-9547 in the curl package for Root:Debian:12. Multiple fixed versions available...

Vite Dev Server - Information Exposure

Vite is a frontend tooling framework for JavaScript. Before versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network using...

NotQuite0DayFriday

This repository documents real bugs in real software. At the time of disclosure the most recent versions were patched. Seeing mistakes that were made in the past can be a useful tool for seeing trends of bugs which make it past all the quality control processes. Understanding what happened, is th...

ROOT-OS-DEBIAN-12-CVE-2026-5435 CVE-2026-5435 in glibc - Patched by Root

Root has patched CVE-2026-5435 in the glibc package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-3RP5-JJMW-4WV2 GHSA-3rp5-jjmw-4wv2 in GitPython - Patched by Root

Root has patched GHSA-3rp5-jjmw-4wv2 in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38816 CVE-2024-38816 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2024-38816 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-48997 CVE-2025-48997 in multer - Patched by Root

Root has patched CVE-2025-48997 in the multer package for Root:npm. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-43871 CVE-2026-43871 in github.com/apache/thrift - Patched by Root

Root has patched CVE-2026-43871 in the github.com/apache/thrift package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-39832 CVE-2026-39832 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-39832 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-42003 CVE-2022-42003 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2022-42003 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44240 CVE-2026-44240 in basic-ftp - Patched by Root

Root has patched CVE-2026-44240 in the basic-ftp package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-3479 CVE-2026-3479 in python3.13 - Patched by Root

Root has patched CVE-2026-3479 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-47287 CVE-2025-47287 in tornado - Patched by Root

Root has patched CVE-2025-47287 in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-49853 CVE-2026-49853 in tornado - Patched by Root

Root has patched CVE-2026-49853 in the tornado package for Root:PyPI. Multiple fixed versions available...

Astra Linux – Vulnerability in Git

Git is a version control system. Before versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories containing submodules could be exploited through a bug in Git. This bug allowed a script to be written into the .git/ directory instead of the submodule’s worktree. This enabl...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick lacked proper boundary checking when processing Huffman-coded data from PCD Photo CD files. The decoder contains a function with incorrect...

Astra Linux – Vulnerability in Firefox

Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...