ROOT-OS-DEBIAN-11-CVE-2024-26583 CVE-2024-26583 in rootio-linux - Patched by Root

Root has patched CVE-2024-26583 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-3108 CVE-2022-3108 in rootio-linux - Patched by Root

Root has patched CVE-2022-3108 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-50527 CVE-2022-50527 in rootio-linux - Patched by Root

Root has patched CVE-2022-50527 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-23239 CVE-2026-23239 in rootio-linux - Patched by Root

Root has patched CVE-2026-23239 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-52888 CVE-2023-52888 in rootio-linux - Patched by Root

Root has patched CVE-2023-52888 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38184 CVE-2025-38184 in rootio-linux - Patched by Root

Root has patched CVE-2025-38184 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-50815 CVE-2022-50815 in rootio-linux - Patched by Root

Root has patched CVE-2022-50815 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-42123 CVE-2024-42123 in rootio-linux - Patched by Root

Root has patched CVE-2024-42123 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-48628 CVE-2022-48628 in rootio-linux - Patched by Root

Root has patched CVE-2022-48628 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-46214 CVE-2026-46214 in rootio-linux - Patched by Root

Root has patched CVE-2026-46214 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38516 CVE-2025-38516 in rootio-linux - Patched by Root

Root has patched CVE-2025-38516 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

SUSE CVE-2026-45106

Weblate is a web based localization tool. Prior to version 2026.5, Weblate's live search preview renders unit source and context as HTML without escaping. Any contributor whose content reaches those fields stores HTML and CSS that runs inside the authenticated editor of every user who runs a...

[SECURITY] Fedora 43 Update: vaultwarden-1.36.0-1.fc43

Unofficial Bitwarden compatible server...

PT-2026-48983

Name of the Vulnerable Software and Affected Versions Discourse versions 2026.1.0 through 2026.1.3 Discourse versions 2026.3.0 Discourse versions 2026.4.0 Description Chat events for public category channels are published to the MessageBus without permission scoping. This allows any MessageBus...

PT-2026-48891

Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, lack of validations in the "submit discussion" endpoint allows for unauthorized access to resources. This issue has been patched in versions 15.107.0 and 16.17.0...

PT-2026-48982

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, the AI "explain" helper only checks can see? on the post being explained, not its reply to post, so any authenticated user...

PT-2026-48981

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, group owners who are not necessarily admins or moderators can view a group's outgoing email/SMTP credentials in plaintext...

PT-2026-48978

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, ReviewableQueuedPostSerializer unconditionally included payload"raw email" for posts that arrived via incoming email...

PT-2026-48894

Frappe is a full-stack web application framework. Prior to version 16.17.4, any user can modify any field in any Onboarding Step record. This issue has been patched in version 16.17.4...

PT-2026-48877

Frappe is a full-stack web application framework. Prior to versions 15.106.0 and 16.16.0, there is a possible SQL Injection via get blog list. This issue has been patched in versions 15.106.0 and 16.16.0...