ROOT-APP-MAVEN-CVE-2026-41417 CVE-2026-41417 in io.netty:netty-codec-http - Patched by Root

Root has patched CVE-2026-41417 in the io.netty:netty-codec-http package for Root:Maven. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44288 CVE-2026-44288 in protobufjs - Patched by Root

Root has patched CVE-2026-44288 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-55752 CVE-2025-55752 in org.apache.tomcat:tomcat-catalina - Patched by Root

Root has patched CVE-2025-55752 in the org.apache.tomcat:tomcat-catalina package for Root:Maven. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-38348 CVE-2025-38348 in linux - Patched by Root

Root has patched CVE-2025-38348 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-64303 CVE-2026-64303 in linux - Patched by Root

Root has patched CVE-2026-64303 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

UBUNTU-CVE-2026-85769

A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state for example during a virtual machine's power-on or state/migration restore, a malformed state blob can supply an oversized skip-block length that is not validated against the remaining si...

MINI-VQ4M-CFCQ-9977

Bulletin has no description...

ROOT-OS-DEBIAN-13-CVE-2026-31403 CVE-2026-31403 in linux - Patched by Root

Root has patched CVE-2026-31403 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38004 CVE-2025-38004 in linux - Patched by Root

Root has patched CVE-2025-38004 in the linux package for Root:Debian:11. Multiple fixed versions available...

MINI-7387-JQ6P-9257

Bulletin has no description...

BELL-CVE-2026-74425

Bulletin has no description...

MINI-X7GH-6F8G-W5G6

Bulletin has no description...

MINI-G996-WVCP-2Q93

Bulletin has no description...

ECHO-D43E-4B7E-6CC8

Bulletin has no description...

MINI-HWJ6-X456-2QX2

Bulletin has no description...

CLSA-2026-1780620677 TuxCare security update for csvtojson (1 CVE)

TuxCare rebuilt csvtojson to address 1 CVE. Fixed in 2.0.8-tuxcare.1...

CLSA-2026-1776213253 TuxCare security update for laravel/framework (8 CVEs)

TuxCare rebuilt laravel/framework to address 8 CVEs. Fixed in 8.12.1-p1+tuxcare...

CLSA-2026-1775003167 TuxCare security update for node-fetch (1 CVE)

TuxCare rebuilt node-fetch to address 1 CVE. Fixed in 1.6.3-tuxcare.1...

CLSA-2026-1774484503 TuxCare security update for minimatch (3 CVEs)

TuxCare rebuilt minimatch to address 3 CVEs. Fixed in 0.3.0-tuxcare.1...

DEBIAN-CVE-2026-53500

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the ALLOWEDSOURCES configuration passes plain strings to re.match without escaping dots, so a hostname differing at dot positions can match the allowlist. This issue is fixed in 7.8.0...