ROOT-OS-DEBIAN-11-CVE-2022-50016 CVE-2022-50016 in rootio-linux - Patched by Root

Root has patched CVE-2022-50016 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-42225 CVE-2024-42225 in rootio-linux - Patched by Root

Root has patched CVE-2024-42225 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-40080 CVE-2025-40080 in rootio-linux - Patched by Root

Root has patched CVE-2025-40080 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-53157 CVE-2026-53157 in rootio-linux - Patched by Root

Root has patched CVE-2026-53157 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-42126 CVE-2024-42126 in rootio-linux - Patched by Root

Root has patched CVE-2024-42126 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38713 CVE-2025-38713 in rootio-linux - Patched by Root

Root has patched CVE-2025-38713 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-37995 CVE-2025-37995 in rootio-linux - Patched by Root

Root has patched CVE-2025-37995 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-53264 CVE-2026-53264 in rootio-linux - Patched by Root

Root has patched CVE-2026-53264 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-39715 CVE-2025-39715 in rootio-linux - Patched by Root

Root has patched CVE-2025-39715 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-47720 CVE-2024-47720 in rootio-linux - Patched by Root

Root has patched CVE-2024-47720 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38336 CVE-2025-38336 in rootio-linux - Patched by Root

Root has patched CVE-2025-38336 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-68307 CVE-2025-68307 in rootio-linux - Patched by Root

Root has patched CVE-2025-68307 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-53107 CVE-2026-53107 in rootio-linux - Patched by Root

Root has patched CVE-2026-53107 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-56590 CVE-2024-56590 in rootio-linux - Patched by Root

Root has patched CVE-2024-56590 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

GHSA-WHVH-WF3X-G77J JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)

The extension allowlist/blocklist check inside PyPIExtensionManager.install was not enforced due to a missing await. For purposes of JupyterLab this was a secondary defense-in-depth check: install was intended to enforce the allowlist/blocklist itself for any future uses and users calling this...

GHSA-72M8-9M7M-H278 LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

Impact LiteLLM's Custom Code Guardrails production create/update paths did not apply the same sandboxing and validation used by the test endpoint. A privileged user with access to create or update guardrails could submit custom Python code that executed in the LiteLLM proxy environment. In...

GHSA-33Q9-F52J-GC75 n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook

Impact The DELETE /$restEndpoint/test-webhook/:id route is registered before the authentication middleware is applied, allowing any unauthenticated network caller who knows a workflow ID to cancel that workflow's active test webhook registration. The impact is limited to disrupting in-progress te...

n8n: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check

Impact The OAuth 2.1 consent and token-issuance flow introduced in n8n 2.27.0 does not verify that the authenticated user has access to the workflow referenced as the OAuth resource. A member-level user can register an OAuth client, self-approve consent for another user's n8n OAuth2-protected MCP...

GHSA-RCV6-PVRJ-4XCG n8n: Authenticated code execution in the n8n Git node

Impact Authenticated n8n users with rights to create and execute workflows could achieve code execution on the n8n host. Using the Git node, under the default git security settings, by staging a crafted local repository, an attacker could cause git to run hooks, executing arbitrary commands as th...

GHSA-35Q8-9MJ6-WJMF n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner

Impact n8n's Enterprise SSO instance-role provisioning maps a role claim asserted by the configured Identity Provider IdP to an n8n global role and applies it during authentication. The provisioning path did not prevent assignment of the global:owner role, unlike the token-exchange identity path,...