Open Source Vulnerabilities
ip, @rootio/ip
CVE-2024-29415 in ip - Patched by Root
ip/ @rootio/ip
CVE-2024-29415 in ip - Patched by Root
loki-3.6-promtail, loki-3.6-promtail
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
socket.io, @rootio/socket.io
CVE-2024-38355 in socket.io - Patched by Root
socket.io/ @rootio/socket.io
CVE-2024-38355 in socket.io - Patched by Root
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)
org.springframework.amqp:spring-amqp
TuxCare security update for org.springframework.amqp:spring-amqp (1 CVE)
org.springframework.amqp:spring-amqp
TuxCare security update for org.springframework.amqp:spring-amqp (1 CVE)
msgpack
CVE-2026-114613 in msgpack - Patched by Root
msgpack
CVE-2026-114613 in msgpack - Patched by Root
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
jsonpath-plus, @rootio/jsonpath-plus
CVE-2024-21534 in jsonpath-plus - Patched by Root
jsonpath-plus/ @rootio/jsonpath-plus
CVE-2024-21534 in jsonpath-plus - Patched by Root
jsonpath-plus, @rootio/jsonpath-plus
CVE-2025-1302 in jsonpath-plus - Patched by Root
jsonpath-plus/ @rootio/jsonpath-plus
CVE-2025-1302 in jsonpath-plus - Patched by Root
django-oauth-toolkit
AIKIDO-2026-11011 in django-oauth-toolkit - Patched by Root
django-oauth-toolkit
AIKIDO-2026-11011 in django-oauth-toolkit - Patched by Root
django-storages
AIKIDO-2025-10101 in django-storages - Patched by Root
django-storages
AIKIDO-2025-10101 in django-storages - Patched by Root
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)
Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion
Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion
cowboy,
Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion
cowboy/
Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion
Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustion
Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustion
cowlib,
Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustion
cowlib/
Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustion
loki-3.6-loki-canary, loki-3.6-loki-canary
XML injection in Saxy via unescaped CDATA section terminator
saxy,
XML injection in Saxy via unescaped CDATA section terminator
saxy/
XML injection in Saxy via unescaped CDATA section terminator
Processing instruction target and content emitted unescaped in Saxy encoder allows XML injection
Processing instruction target and content emitted unescaped in Saxy encoder allows XML injection
saxy,
Processing instruction target and content emitted unescaped in Saxy encoder allows XML injection
saxy/
Processing instruction target and content emitted unescaped in Saxy encoder allows XML injection
XML comment injection in Saxy encoder via unescaped double hyphen
XML comment injection in Saxy encoder via unescaped double hyphen
saxy,
XML comment injection in Saxy encoder via unescaped double hyphen
saxy/
XML comment injection in Saxy encoder via unescaped double hyphen
node-undici, node-undici, node-undici
node-undici, node-undici, node-undici
node-undici, node-undici, node-undici
node-undici, node-undici, node-undici
node-undici, node-undici, node-undici
sqlparse
AIKIDO-2026-576438 in sqlparse - Patched by Root
sqlparse
AIKIDO-2026-576438 in sqlparse - Patched by Root
sqlparse
CVE-2023-30608 in sqlparse - Patched by Root
sqlparse
CVE-2023-30608 in sqlparse - Patched by Root
sqlparse
CVE-2024-4340 in sqlparse - Patched by Root
sqlparse
CVE-2024-4340 in sqlparse - Patched by Root
sqlparse
CVE-2026-54284 in sqlparse - Patched by Root
sqlparse
CVE-2026-54284 in sqlparse - Patched by Root
sqlparse
CVE-2026-71491 in sqlparse - Patched by Root
sqlparse
CVE-2026-71491 in sqlparse - Patched by Root
sqlparse
GHSA-62qf-jcq8-8gxw in sqlparse - Patched by Root
sqlparse
GHSA-62qf-jcq8-8gxw in sqlparse - Patched by Root
