Open Source Vulnerabilities

org.apache.tomcat.embed:tomcat-embed-core, io.root.org.apache.tomcat.embed:tomcat-embed-core

CVE-2026-32990 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

org.apache.tomcat.embed:tomcat-embed-core, io.root.org.apache.tomcat.embed:tomcat-embed-core

CVE-2026-34500 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

shell-quote, @rootio/shell-quote

CVE-2026-9277 in shell-quote - Patched by Root

shell-quote, @rootio/shell-quote

CVE-2026-13311 in shell-quote - Patched by Root

crossplane-cli-2.3

shell-quote, @rootio/shell-quote

CVE-2021-42740 in shell-quote - Patched by Root

chainctl-fips

rancher-agent-2.12

libfreemarker-java, libfreemarker-java, libfreemarker-java

renovate, renovate

qt5-qtbase

Important: qt5-qtbase security update

osbuild-composer

Important: osbuild-composer security update

gzip

Moderate: gzip security update

helm-operator-fips

cipher-base, @rootio/cipher-base

CVE-2025-9287 in cipher-base - Patched by Root

glob, @rootio/glob

CVE-2025-64756 in glob - Patched by Root

helm-operator-fips

y18n, @rootio/y18n

CVE-2020-7774 in y18n - Patched by Root

tar, @rootio/tar

CVE-2026-73566 in tar - Patched by Root

headlamp-fips

cryptography

TuxCare security update for cryptography (2 CVEs)

packer-fips

harvester-fips-webhook

harvester-fips

postcss, @rootio/postcss

CVE-2026-45623 in postcss - Patched by Root

postcss, @rootio/postcss

CVE-2026-73646 in postcss - Patched by Root

postcss, @rootio/postcss

GHSA-r28c-9q8g-f849 in postcss - Patched by Root

postcss, @rootio/postcss

CVE-2026-41305 in postcss - Patched by Root

helm-set-status, helm-set-status

io.opentelemetry.javaagent:opentelemetry-javaagent, io.root.io.opentelemetry.javaagent:opentelemetry-javaagent

CVE-2026-33701 in io.opentelemetry.javaagent:opentelemetry-javaagent - Patched by Root

xeol-fips

helm-set-status, helm-set-status

helm-push, helm-push

moment, @rootio/moment, @rootio/multer

CVE-2022-24785 in moment - Patched by Root

moment, @rootio/moment

CVE-2022-31129 in moment - Patched by Root

harvester-fips

gitlab-rails-ce-fips-18.7

gitlab-rails-ce-fips-18.7

syft-fips

newrelic-infrastructure-agent-fips

newrelic-infrastructure-agent-fips

xeol-fips

kubescape-server-fips-downloader

zarf-fips

syft, syft

dagger, dagger

consul-k8s-1.5-cli

cloudbeat-9.2

chaos-mesh

redpanda-operator-26.1