Open Source Vulnerabilities

ioredis, @rootio/ioredis

AIKIDO-2026-967850 in ioredis - Patched by Root

ioredis, @rootio/ioredis

CVE-2026-93435 in ioredis - Patched by Root

aws-sdk, @rootio/aws-sdk

CVE-2020-28472 in aws-sdk - Patched by Root

pac-resolver, @rootio/pac-resolver

CVE-2021-23406 in pac-resolver - Patched by Root

validator, @rootio/validator

CVE-2025-12758 in validator - Patched by Root

chrono-node, @rootio/chrono-node

CVE-2021-23371 in chrono-node - Patched by Root

dottie, @rootio/dottie

CVE-2023-26132 in dottie - Patched by Root

openssh, openssh, openssh, openssh, openssh, openssh

node-forge

TuxCare security update for node-forge (1 CVE)

keycloak-fips-26.8-operator

keycloak-fips-26.8-operator

keycloak-fips-26.8-iamguarded-fips

keycloak-fips-26.8-iamguarded-fips

keycloak-fips-26.8

keycloak-fips-26.8

keycloak-26.8-operator

keycloak-26.8-operator

keycloak-26.8-iamguarded-compat

keycloak-26.8-iamguarded-compat

keycloak-26.8

keycloak-26.8

Vulnerability-Lookup: memory amplification through webhook payload template format specifiers

io.netty:netty-codec-http3

Lightwell Security Advisory: netty-codec-http3 4.2.13.Final-rhlw-00001

jszip, @rootio/jszip

CVE-2022-48285 in jszip - Patched by Root

adm-zip, @rootio/adm-zip

AIKIDO-2026-327281 in adm-zip - Patched by Root

adm-zip, @rootio/adm-zip

AIKIDO-2026-363221 in adm-zip - Patched by Root

adm-zip, @rootio/adm-zip

CVE-2026-39244 in adm-zip - Patched by Root

adm-zip, @rootio/adm-zip

CVE-2026-77301 in adm-zip - Patched by Root

org.springframework.data:spring-data-commons

TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)

flatpak, flatpak, flatpak, flatpak

Security update for flatpak

mozilla-nss, mozilla-nss

Security update for mozilla-nss

adm-zip, @rootio/adm-zip

GHSA-rcw4-f5rp-g42v in adm-zip - Patched by Root

adm-zip, @rootio/adm-zip

CVE-2026-102282 in adm-zip - Patched by Root

adm-zip, @rootio/adm-zip

GHSA-8238-w5pm-2374 in adm-zip - Patched by Root

libhttp-body-perl, libhttp-body-perl, libhttp-body-perl

lodash, @rootio/lodash

CVE-2018-16487 in lodash - Patched by Root

lodash, @rootio/lodash

CVE-2019-1010266 in lodash - Patched by Root

lodash, @rootio/lodash

CVE-2019-10744 in lodash - Patched by Root

lodash.merge, @rootio/lodash.merge

GHSA-2m96-9w4j-wgv7 in lodash.merge - Patched by Root

lodash.merge, @rootio/lodash.merge

GHSA-h726-x36v-rx45 in lodash.merge - Patched by Root

xml-crypto, @rootio/xml-crypto

CVE-2025-29774 in xml-crypto - Patched by Root

xml-crypto, @rootio/xml-crypto

CVE-2025-29775 in xml-crypto - Patched by Root

github.com/cilium/cilium, rootio-github.com/cilium/cilium

CVE-2026-41520 in github.com/cilium/cilium - Patched by Root

minimatch, @rootio/minimatch

CVE-2016-10540 in minimatch - Patched by Root

minimatch, @rootio/minimatch

NSWG-ECO-118 in minimatch - Patched by Root

HTTP::Body versions before 1.24_02 for Perl parse the trailer in quadratic time