Open Source Vulnerabilities

excon

AIKIDO-2026-331213 in excon - Patched by Root

ThreadX Modules invokes trace-full callbacks after module unload

gvfs, gvfs, gvfs, gvfs, gvfs, gvfs, gvfs, gvfs

Security update for gvfs

User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilege

sssd, sssd

Security update for sssd

cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups

Security update for cups

nginx, rootio-nginx

CVE-2026-15176 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-97629 in nginx - Patched by Root

apache2, apache2-prefork, apache2-event, apache2-devel, apache2-manual, apache2-utils, apache2-worker

Security update for apache2

apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2

Security update for apache2

org.eclipse.jetty:jetty-http, io.root.org.eclipse.jetty:jetty-http

CVE-2024-6763 in org.eclipse.jetty:jetty-http - Patched by Root

org.eclipse.jetty:jetty-http, io.root.org.eclipse.jetty:jetty-http

GHSA-wjpw-4j6x-6rwh in org.eclipse.jetty:jetty-http - Patched by Root

org.eclipse.jetty:jetty-http, io.root.org.eclipse.jetty:jetty-http

CVE-2026-2332 in org.eclipse.jetty:jetty-http - Patched by Root

org.eclipse.jetty:jetty-http, io.root.org.eclipse.jetty:jetty-http

CVE-2025-11143 in org.eclipse.jetty:jetty-http - Patched by Root

org.eclipse.jetty:jetty-security, io.root.org.eclipse.jetty:jetty-security

CVE-2026-10050 in org.eclipse.jetty:jetty-security - Patched by Root

apache2, apache2-devel, apache2-manual, apache2-prefork, apache2-utils, apache2-worker, apache2, apache2-devel, apache2-manual, apache2-prefork, apache2-utils, apache2-worker

Security update for apache2

undici, @rootio/undici

CVE-2026-16729 in undici - Patched by Root

undici, @rootio/undici

CVE-2026-87018 in undici - Patched by Root

rootlesskit, rootlesskit, rootlesskit, rootlesskit, rootlesskit, rootlesskit, rootlesskit, rootlesskit

Security update for rootlesskit

libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl

libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl, libcatalyst-plugin-authentication-perl

tomcat10, tomcat10, tomcat10, tomcat10, tomcat10, tomcat10, tomcat10

Security update for tomcat10

curl, curl

Security update for curl

aws-sdk-core

AIKIDO-2026-948376 in aws-sdk-core - Patched by Root

curl, curl

Security update for curl

curl

Security update for curl

amazon-ssm-agent

Security update for amazon-ssm-agent

org.bouncycastle:bc-fips, org.bouncycastle:bcprov-jdk18on, org.bouncycastle:bcprov-jdk15to18, io.root.org.bouncycastle:bc-fips, io.root.org.bouncycastle:bcprov-jdk18on, io.root.org.bouncycastle:bcprov-jdk15to18

CVE-2026-13506 in org.bouncycastle:bc-fips - Patched by Root

org.bouncycastle:bc-fips, org.bouncycastle:bcprov-jdk18on, org.bouncycastle:bcprov-jdk15to18, io.root.org.bouncycastle:bc-fips, io.root.org.bouncycastle:bcprov-jdk18on, io.root.org.bouncycastle:bcprov-jdk15to18

CVE-2026-8763 in org.bouncycastle:bc-fips - Patched by Root

org.bouncycastle:bc-fips, io.root.org.bouncycastle:bc-fips

CVE-2026-13505 in org.bouncycastle:bc-fips - Patched by Root

org.bouncycastle:bc-fips, io.root.org.bouncycastle:bc-fips

CVE-2026-8798 in org.bouncycastle:bc-fips - Patched by Root

com.jayway.jsonpath:json-path

Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier

aws-nitro-enclaves-cli, aws-nitro-enclaves-cli

Security update for aws-nitro-enclaves-cli

gvfs, gvfs, gvfs

Security update for gvfs

python-PyJWT, python-PyJWT, python-PyJWT, python-PyJWT, python-PyJWT, python-PyJWT, python-PyJWT, python-PyJWT, python-PyJWT, python-PyJWT, python-PyJWT, python-PyJWT

Security update for python-PyJWT

libsoup, libsoup, libsoup, libsoup, libsoup, libsoup, libsoup, libsoup

Security update for libsoup

libsoup, libsoup, libsoup

Security update for libsoup

guava, j2objc-annotations, jspecify, guava, j2objc-annotations, jspecify, guava, j2objc-annotations, jspecify, guava, j2objc-annotations, jspecify, guava, j2objc-annotations, jspecify, guava, j2objc-annotations, jspecify, guava, j2objc-annotations, jspecify, guava, j2objc-annotations, jspecify, guava, j2objc-annotations, jspecify, guava, j2objc-annotations, jspecify, guava, j2objc-annotations, jspecify

Security update for guava, j2objc-annotations

kernel-livepatch-SLE15-SP7_Update_19

Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

linux-lts, linux-lts, linux-lts

linux-lts, linux-lts

kernel-livepatch-SLE15-SP7_Update_20

Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

tar, @rootio/tar

CVE-2026-26960 in tar - Patched by Root

tar, @rootio/tar

CVE-2026-59873 in tar - Patched by Root

tar, @rootio/tar

CVE-2026-73566 in tar - Patched by Root

tar, @rootio/tar

CVE-2026-24842 in tar - Patched by Root

tar, @rootio/tar

CVE-2026-29786 in tar - Patched by Root

tar, @rootio/tar

CVE-2026-59874 in tar - Patched by Root