Open Source Vulnerabilities

cleave, cleave

commercial-gitlab-rails-ee-19.1

cleave, cleave

cinc-auditor, cinc-auditor

cinc-auditor, cinc-auditor

django

TuxCare security update for django (9 CVEs)

django

TuxCare security update for django (6 CVEs)

django

TuxCare security update for django (7 CVEs)

net.minidev:json-smart

TuxCare security update for net.minidev:json-smart (1 CVE)

numpy

TuxCare security update for numpy (5 CVEs)

numpy

TuxCare security update for numpy (7 CVEs)

python2.7, python3.4, python3.5, python2.7, python3.5, python2.7, python3.6, python3.7, python3.8, python3.8, python2.7, python3.9, python3.10, python2.7, python3.11, python3.12, python3.14, python3.14

python2.7, python3.4, python3.5, python2.7, python3.5, python2.7, python3.6, python3.7, python3.8, python3.8, python2.7, python3.9, python3.10, python2.7, python3.11, python3.12, python3.14, python3.14

python2.7, python3.4, python3.5, python2.7, python3.5, python2.7, python3.6, python3.7, python3.8, python3.8, python2.7, python3.9, python3.10, python2.7, python3.11, python3.12, python3.14, python3.14

wireguard, wireguard, wireguard, wireguard, wireguard, wireguard, wireguard

follow-redirects, @rootio/follow-redirects

CVE-2026-111755 in follow-redirects - Patched by Root

follow-redirects, @rootio/follow-redirects

CVE-2026-111756 in follow-redirects - Patched by Root

follow-redirects, @rootio/follow-redirects

CVE-2026-116689 in follow-redirects - Patched by Root

rsyslog, rsyslog, rsyslog

Security update for rsyslog

pdfjs-dist, @rootio/pdfjs-dist

CVE-2024-4367 in pdfjs-dist - Patched by Root

pdfjs-dist, @rootio/pdfjs-dist

AIKIDO-2026-169371 in pdfjs-dist - Patched by Root

decode-uri-component, @rootio/decode-uri-component

CVE-2026-118664 in decode-uri-component - Patched by Root

brotli, rootio-brotli

CVE-2026-111497 in brotli - Patched by Root

excon

AIKIDO-2026-331213 in excon - Patched by Root

ThreadX Modules invokes trace-full callbacks after module unload

gvfs, gvfs, gvfs, gvfs, gvfs, gvfs, gvfs, gvfs

Security update for gvfs

User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilege

sssd, sssd

Security update for sssd

cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups

Security update for cups

nginx, rootio-nginx

CVE-2026-15176 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-97629 in nginx - Patched by Root

apache2, apache2-prefork, apache2-event, apache2-devel, apache2-manual, apache2-utils, apache2-worker

Security update for apache2

apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2

Security update for apache2

org.eclipse.jetty:jetty-http, io.root.org.eclipse.jetty:jetty-http

CVE-2024-6763 in org.eclipse.jetty:jetty-http - Patched by Root

org.eclipse.jetty:jetty-http, io.root.org.eclipse.jetty:jetty-http

GHSA-wjpw-4j6x-6rwh in org.eclipse.jetty:jetty-http - Patched by Root

org.eclipse.jetty:jetty-http, io.root.org.eclipse.jetty:jetty-http

CVE-2026-2332 in org.eclipse.jetty:jetty-http - Patched by Root

org.eclipse.jetty:jetty-http, io.root.org.eclipse.jetty:jetty-http

CVE-2025-11143 in org.eclipse.jetty:jetty-http - Patched by Root

org.eclipse.jetty:jetty-security, io.root.org.eclipse.jetty:jetty-security

CVE-2026-10050 in org.eclipse.jetty:jetty-security - Patched by Root

apache2, apache2-devel, apache2-manual, apache2-prefork, apache2-utils, apache2-worker, apache2, apache2-devel, apache2-manual, apache2-prefork, apache2-utils, apache2-worker

Security update for apache2

undici, @rootio/undici

CVE-2026-16729 in undici - Patched by Root

undici, @rootio/undici

CVE-2026-87018 in undici - Patched by Root

rootlesskit, rootlesskit, rootlesskit, rootlesskit, rootlesskit, rootlesskit, rootlesskit, rootlesskit

Security update for rootlesskit

libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl

libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl

tomcat10, tomcat10, tomcat10, tomcat10, tomcat10, tomcat10, tomcat10

Security update for tomcat10

curl, curl

Security update for curl

aws-sdk-core

AIKIDO-2026-948376 in aws-sdk-core - Patched by Root

curl, curl

Security update for curl

curl

Security update for curl