ROOT-OS-DEBIAN-12-CVE-2025-64720 CVE-2025-64720 in rootio-libpng1.6 - Patched by Root

Root has patched CVE-2025-64720 in the rootio-libpng1.6 package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-41419 CVE-2023-41419 in rootio-gevent - Patched by Root

Root has patched CVE-2023-41419 in the rootio-gevent package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-30167 CVE-2025-30167 in rootio-jupyter_core - Patched by Root

Root has patched CVE-2025-30167 in the rootio-jupytercore package for Root:PyPI. Multiple fixed versions available...

EUVD-2021-0952

Malware in sbrugna...

Malicious code in playground_root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5ac61f295a55d3954f84caefcd0b84187f168266243137208bba3f2e77f4fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in docs-root (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-4361 Malicious code in inhouse-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e8e839e62290d15c37784e435ea01c0bde7eadec64e65d02b3dcc3eeb01acf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3777 Malicious code in zksync-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0af13565b82b48cb80a58f21db293bbef9f5ef83e1c4fdcf67534110215bab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iff-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a57d0a13eebe99cec9bd319389850e2b8f5536100fa634811d521a13bd3b6c16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1650 Malicious code in iff-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a57d0a13eebe99cec9bd319389850e2b8f5536100fa634811d521a13bd3b6c16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lunar-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9a8b05cd878b17af9caf8b7741e3b99e737c24cce44b7e52942663d6f585ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openapi-to-graphql-root (npm)

--- -= Per source details. Do not edit below this line.=-...

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview github.com/u-root/u-root/pkg/cpio is a package that provides Go versions of standard Linux tools and bootloaders. It also provides tools for compiling Go programs in a single binary and creating initramfs images. Affected versions of this package are vulnerable to Arbitrary File Write vi...