ROOT-OS-ALPINE-323-CVE-2026-22796 CVE-2026-22796 in openssl - Patched by Root

Root has patched CVE-2026-22796 in the openssl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-48712 CVE-2026-48712 in protobufjs - Patched by Root

Root has patched CVE-2026-48712 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44289 CVE-2026-44289 in protobufjs - Patched by Root

Root has patched CVE-2026-44289 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44290 CVE-2026-44290 in protobufjs - Patched by Root

Root has patched CVE-2026-44290 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44293 CVE-2026-44293 in protobufjs - Patched by Root

Root has patched CVE-2026-44293 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-34070 CVE-2026-34070 in langchain-core - Patched by Root

Root has patched CVE-2026-34070 in the langchain-core package for Root:PyPI. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-1761 CVE-2026-1761 in libsoup3 - Patched by Root

Root has patched CVE-2026-1761 in the libsoup3 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-0719 CVE-2026-0719 in libsoup3 - Patched by Root

Root has patched CVE-2026-0719 in the libsoup3 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-4271 CVE-2026-4271 in libsoup3 - Patched by Root

Root has patched CVE-2026-4271 in the libsoup3 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-2436 CVE-2026-2436 in libsoup3 - Patched by Root

Root has patched CVE-2026-2436 in the libsoup3 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-28417 CVE-2026-28417 in vim - Patched by Root

Root has patched CVE-2026-28417 in the vim package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-46483 CVE-2026-46483 in vim - Patched by Root

Root has patched CVE-2026-46483 in the vim package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-47162 CVE-2026-47162 in vim - Patched by Root

Root has patched CVE-2026-47162 in the vim package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-59856 CVE-2026-59856 in vim - Patched by Root

Root has patched CVE-2026-59856 in the vim package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-35177 CVE-2026-35177 in vim - Patched by Root

Root has patched CVE-2026-35177 in the vim package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-39881 CVE-2026-39881 in vim - Patched by Root

Root has patched CVE-2026-39881 in the vim package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-28421 CVE-2026-28421 in vim - Patched by Root

Root has patched CVE-2026-28421 in the vim package for Root:Debian:11. Multiple fixed versions available...

Flowise - NVIDIA NIM Endpoints Missing Authentication

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router /api/v1/nvidia-nim/ is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generati...

WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation

User Registration & Membership WordPress plugin = 5.1.2 contains an improper privilege management vulnerability caused by accepting user-supplied roles without server-side allowlist enforcement, letting unauthenticated attackers create administrator accounts id: CVE-2026-1492 info: name: WordPres...

Gitea <= 1.27.0 - Pre-Auth Remote Code Execution

Gitea versions 1.17 through 1.27.0 contain a remote code execution vulnerability in the diffpatch endpoint caused by an add/add collision that writes an executable Git hook into the bare repository's GITDIR. An attacker with write access can execute arbitrary commands as the Gitea service account...