Open Source Vulnerabilities

org.springframework:spring-web, io.root.org.springframework:spring-web

CVE-2016-1000027 in org.springframework:spring-web - Patched by Root

org.springframework:spring-expression, io.root.org.springframework:spring-expression

CVE-2026-41849 in org.springframework:spring-expression - Patched by Root

org.springframework:spring-beans, io.root.org.springframework:spring-beans

CVE-2022-22970 in org.springframework:spring-beans - Patched by Root

org.springframework:spring-core, io.root.org.springframework:spring-core

CVE-2015-5211 in org.springframework:spring-core - Patched by Root

org.springframework:spring-webmvc, org.springframework:spring-core, io.root.org.springframework:spring-webmvc, io.root.org.springframework:spring-core

CVE-2016-5007 in org.springframework:spring-webmvc - Patched by Root

org.springframework:spring-web, io.root.org.springframework:spring-web

CVE-2024-22259 in org.springframework:spring-web - Patched by Root

org.springframework:spring-web, io.root.org.springframework:spring-web

CVE-2024-22262 in org.springframework:spring-web - Patched by Root

org.springframework:spring-webmvc, io.root.org.springframework:spring-webmvc

CVE-2014-0225 in org.springframework:spring-webmvc - Patched by Root

org.springframework:spring-core, io.root.org.springframework:spring-core

CVE-2018-1272 in org.springframework:spring-core - Patched by Root

org.springframework:spring-beans, org.springframework:spring-webmvc, io.root.org.springframework:spring-beans, io.root.org.springframework:spring-webmvc

CVE-2022-22965 in org.springframework:spring-beans - Patched by Root

org.springframework:spring-web, io.root.org.springframework:spring-web

CVE-2024-22243 in org.springframework:spring-web - Patched by Root

org.springframework:spring-webmvc, org.springframework:spring-webflux, io.root.org.springframework:spring-webmvc, io.root.org.springframework:spring-webflux

CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root

org.springframework:spring-webmvc, org.springframework:spring-core, io.root.org.springframework:spring-webmvc, io.root.org.springframework:spring-core

CVE-2026-41845 in org.springframework:spring-webmvc - Patched by Root

org.springframework:spring-expression, io.root.org.springframework:spring-expression

CVE-2026-41850 in org.springframework:spring-expression - Patched by Root

org.springframework:spring-webmvc, io.root.org.springframework:spring-webmvc

CVE-2026-47884 in org.springframework:spring-webmvc - Patched by Root

org.iq80.snappy:snappy

GraphicsMagick

Security update for GraphicsMagick

qt6-httpserver, qt6-httpserver, qt6-httpserver

qt6-httpserver, qt6-httpserver, qt6-httpserver

ghostscript, ghostscript

Security update for ghostscript

python-PyJWT

Security update for python-PyJWT

valkey

Security update for valkey

io.netty:netty-codec, io.netty:netty-codec-dns, io.netty:netty-codec-http, io.netty:netty-codec-http2, io.netty:netty-codec-redis, io.netty:netty-codec-smtp, io.netty:netty-common, io.netty:netty-handler

TuxCare security update for io.netty (16 CVEs)

multer, @rootio/multer

CVE-2026-77063 in multer - Patched by Root

multer, @rootio/multer

CVE-2026-113872 in multer - Patched by Root

multer, @rootio/multer

CVE-2026-77078 in multer - Patched by Root

multer, @rootio/multer

CVE-2026-82333 in multer - Patched by Root

io.netty:netty-all, io.netty:netty-codec-haproxy, io.netty:netty-codec-http, io.netty:netty-codec-http2, io.netty:netty-codec-redis, io.netty:netty-codec-smtp, io.netty:netty-handler

TuxCare security update for io.netty (16 CVEs)

io.netty:netty-codec-http, io.netty:netty-codec-http2, io.netty:netty-codec-redis, io.netty:netty-common, io.netty:netty-handler

TuxCare security update for io.netty (11 CVEs)

io.netty:netty-codec-haproxy, io.netty:netty-codec-http, io.netty:netty-codec-http2, io.netty:netty-codec-redis

TuxCare security update for io.netty (8 CVEs)

hadoop-client-modules

io.netty:netty-all, io.netty:netty-handler

TuxCare security update for io.netty (2 CVEs)

io.netty:netty-all, io.netty:netty-bom, io.netty:netty-buffer, io.netty:netty-codec, io.netty:netty-codec-dns, io.netty:netty-codec-haproxy, io.netty:netty-codec-http, io.netty:netty-codec-http2, io.netty:netty-codec-memcache, io.netty:netty-codec-mqtt, io.netty:netty-codec-redis, io.netty:netty-codec-smtp, io.netty:netty-codec-socks, io.netty:netty-codec-stomp, io.netty:netty-codec-xml, io.netty:netty-common, io.netty:netty-dev-tools, io.netty:netty-example, io.netty:netty-handler, io.netty:netty-handler-proxy, io.netty:netty-microbench, io.netty:netty-parent, io.netty:netty-resolver, io.netty:netty-resolver-dns, io.netty:netty-resolver-dns-native-macos, io.netty:netty-tarball, io.netty:netty-testsuite, io.netty:netty-testsuite-autobahn, io.netty:netty-testsuite-http2, io.netty:netty-testsuite-native-image, io.netty:netty-testsuite-osgi, io.netty:netty-transport, io.netty:netty-transport-blockhound-tests, io.netty:netty-transport-native-epoll, io.netty:netty-transport-native-kqueue, io.netty:netty-transport-native-unix-common, io.netty:netty-transport-native-unix-common-tests, io.netty:netty-transport-rxtx, io.netty:netty-transport-sctp, io.netty:netty-transport-udt

TuxCare security update for io.netty (5 CVEs)

pcre2, rootio-pcre2

CVE-2022-41409 in pcre2 - Patched by Root

pcre2, rootio-pcre2

CVE-2025-58050 in pcre2 - Patched by Root

org.eclipse.jetty:jetty-http

TuxCare security update for org.eclipse.jetty:jetty-http (1 CVE)

io.netty:netty-codec-http, io.netty:netty-codec-redis, io.netty:netty-handler

TuxCare security update for io.netty (6 CVEs)

Memory leak in the Mbed TLS crypto shim on failed cipher/AEAD operations leads to remotely triggered crypto denial of service

sys_rand_get() silently returns an unwritten buffer when the entropy device is not ready

Inverted memory-permission check in the RTIO syscall verifier allows a user-mode thread to read and write arbitrary kernel memory

Bluetooth LE Controller accepts received PDUs whose length field exceeds the configured maximum receive length, causing out-of-bounds read and write

I2S configure syscall handler passes an unvalidated user-supplied kernel object pointer to drivers

Time-of-check/time-of-use double fetch in the Zephyr i3c_transfer() syscall handler allows kernel-mode control-flow hijack from user mode

Unvalidated user pointers in RTIO syscall verifiers allow a user-mode thread to write kernel memory

Bluetooth Classic AVDTP session reuse re-initializes a queued work item, corrupting the system work queue

linux-lts

linux-lts, linux-lts, linux-lts

linux-lts

linux-lts, linux-lts, linux-lts

storybook, @rootio/storybook

AIKIDO-2026-354517 in storybook - Patched by Root