CVE-2026-27606 vulnerabilities

Vulnerabilities for packages: vitess, langfuse-fips, nextcloud-server, librechat, vite, langfuse...

DEBIAN-CVE-2026-27606

Rollup is a module bundler for JavaScript. Versions prior to 2.80.0, 3.30.0, and 4.59.0 of the Rollup module bundler specifically v4.x and present in current source is vulnerable to an Arbitrary File Write via Path Traversal. Insecure file name sanitization in the core engine allows an attacker t...