ROOT-APP-NPM-GHSA-H25M-26QC-WCJF GHSA-h25m-26qc-wcjf in next - Patched by Root

Root has patched GHSA-h25m-26qc-wcjf in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-29927 CVE-2025-29927 in next - Patched by Root

Root has patched CVE-2025-29927 in the next package for Root:npm. Multiple fixed versions available...

bash-up

bash-up un script automático para corregir la vulnerabilidad bash CVE-2014-6271...

fixcve2023_39526_2023_39527

Corrección CVE 202339526 GHSA-gf46-prm4-56pc https://github.com/advisories/GHSA-gf46-prm4-56pc CVE 202339527 GHSA-xw2r-f8xv-c8xp https://github.com/advisories/GHSA-xw2r-f8xv-c8xp Prestashop corrige la vulnerabilidad CVE-2023-39526 y CVE-2023-39527...

ROOT-OS-ALPINE-322-CVE-2026-12064 CVE-2026-12064 in curl - Patched by Root

Root has patched CVE-2026-12064 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-41007 CVE-2026-41007 in org.springframework.hateoas:spring-hateoas - Patched by Root

Root has patched CVE-2026-41007 in the org.springframework.hateoas:spring-hateoas package for Root:Maven. Multiple fixed versions available...

Scoold < 1.64.0 - Authentication Bypass

Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /api;/config endpoint. By appending a semicolon in the URL, attackers can bypass authentication and gain unauthorised access to sensitive configuration data. Furthermore, PUT...

ROOT-APP-MAVEN-CVE-2025-14813 CVE-2025-14813 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched CVE-2025-14813 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-53615 CVE-2026-53615 in util-linux - Patched by Root

Root has patched CVE-2026-53615 in the util-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-22741 CVE-2026-22741 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-22741 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

tomcat-line-check

tomcat-line-check CVE-2026-24880 · GHSA-563x-q5rq-57qp —— Apache 那句 upgrade to version 11.0.20, 10.1.52 or 9.0.116 对你成不成立? 对多数人不成立,而且有四种不同的不成立方式。这个工具扫你的构件,告诉你是哪一种。 root@kitploit: java -jar tomcat-line-check.jar /path/to/tomcat 解压部署的 Tomcat java -jar tomcat-line-check.jar app.war war java -jar...

CVE-2026-92034 Site isolation issue in the Graphics component

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

ROOT-OS-DEBIAN-12-CVE-2025-28162 CVE-2025-28162 in libpng1.6 - Patched by Root

Root has patched CVE-2025-28162 in the libpng1.6 package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-28370 CVE-2023-28370 in tornado - Patched by Root

Root has patched CVE-2023-28370 in the tornado package for Root:PyPI. Multiple fixed versions available...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: iwl4965 – Added a check for the return value of the createsinglethreadworkqueue function. The check is added to prevent NULL pointer dereferencing...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: hfsplus: fixed a slab-out-of-bounds read in hfsplusuni2asc BUG: KASAN: slab-out-of-bounds in hfsplusuni2asc+0xa71/0xb90 fs/hfsplus/unicode.c:186 A read of size 2 at address ffff8880289ef218 was performed by task syz.6.248/1429...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In net:tIPC, there is a fix for the refcount warning in tipcaeadencrypt. The syzbot report identified a refcount warning 1 caused by calling getnet on a network namespace that is being destroyed refcount=0. This occurs when a TIP...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Check whether the returned RPORT is valid. Klocwork reported a warning that the RPORT might be NULL and would be dereferenced. The RPORT returned by the call to fcbsgtorport could be NULL and would be dereferenced...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: SCTP: The comparison of MACs has been fixed to require constant-time operations. To prevent timing attacks, MACs need to be compared in constant-time. Use the appropriate helper function for this purpose...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tipc: Force a dst refcount before doing decryption As stated in commit 3bc07321ccc2 “xfrm: Force a dst refcount before entering the xfrm type handlers”: “Crypto requests might return asynchronously. In this case, we leave the rcu...