ROOT-OS-DEBIAN-12-CVE-2025-68344 CVE-2025-68344 in rootio-linux - Patched by Root

Root has patched CVE-2025-68344 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-68289 CVE-2025-68289 in rootio-linux - Patched by Root

Root has patched CVE-2025-68289 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-23047 CVE-2026-23047 in rootio-linux - Patched by Root

Root has patched CVE-2026-23047 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-37769 CVE-2025-37769 in rootio-linux - Patched by Root

Root has patched CVE-2025-37769 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-26740 CVE-2024-26740 in rootio-linux - Patched by Root

Root has patched CVE-2024-26740 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38038 CVE-2025-38038 in rootio-linux - Patched by Root

Root has patched CVE-2025-38038 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-56538 CVE-2024-56538 in rootio-linux - Patched by Root

Root has patched CVE-2024-56538 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-47708 MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper

MCP-for-Stata is an MCP server for Stata to integrate Stata into an agent. Prior to version 1.17.3, the logfilename parameter in the statado API and CLI is directly interpolated into a Stata command string without sanitization. The security guard GuardValidator only scans the do-file content but...

EUVD-2026-43956

pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs...

ROOT-APP-NPM-CVE-2025-15284 CVE-2025-15284 in @rootio/qs - Patched by Root

Root has patched CVE-2025-15284 in the @rootio/qs package for Root:npm. Multiple fixed versions available...

CVE-2026-16403

CVE-2026-16403 affects Mozilla Firefox’s Address Bar spoofing functionality. The connected sources consistently identify a spoofing issue in the Address Bar component that was fixed in Firefox 153. Details across SUSE, Ubuntu OSV, Debian, EUVD, CIRCL, and CVE listings corroborate the same root ca...

CVE-2026-16399

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16399

Technical details about CVE-2026-16399 are not publicly available in the provided documents. The sources summarize a site isolation issue in the DOM: Navigation component with Firefox fix in version 153. Monitor for updates.

EUVD-2026-46236

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153...

EUVD-2026-46227

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

EUVD-2026-46223

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153...

CVE-2026-16376

Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16375

CVE-2026-16375 affects Mozilla Firefox’s Networking: HTTP component with a site isolation issue. The vulnerability was fixed in Firefox 153 and Firefox ESR 140.13. Affected product: Firefox (Networking: HTTP) with site isolation as the underlying bug. According to the provided documents, the CVSS...

EUVD-2026-46205

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

ROOT-OS-UBUNTU-2204-CVE-2023-52481 CVE-2023-52481 in rootio-linux - Patched by Root

Root has patched CVE-2023-52481 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...