Open Source Vulnerabilities

@fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook

golang.org/x/net, rootio-golang.org/x/net

CVE-2026-97032 in golang.org/x/net - Patched by Root

golang.org/x/net, rootio-golang.org/x/net

CVE-2024-45338 in golang.org/x/net - Patched by Root

golang.org/x/net, rootio-golang.org/x/net

CVE-2025-22872 in golang.org/x/net - Patched by Root

golang.org/x/net, rootio-golang.org/x/net

CVE-2026-78660 in golang.org/x/net - Patched by Root

golang.org/x/net, rootio-golang.org/x/net

CVE-2026-78669 in golang.org/x/net - Patched by Root

gcc48, gcc48

Security update for gcc48

gcc48, gcc48

Security update for gcc48

@fastify/http-proxy vulnerable to prefix escape via decoded route parameters

graphql-core

CVE-2026-119286 in graphql-core - Patched by Root

@fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments

dompurify, @rootio/dompurify

GHSA-cg2g-xh64-v4q7 in dompurify - Patched by Root

kernel-livepatch-SLE16-RT_Update_5

Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_3

Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_2

Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_1

Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_0

Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

openssl-3, openssl-3, openssl-3, openssl-3, openssl-3, openssl-3

Recommended update for openssl-3

tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind, io.root.tools.jackson.core:jackson-databind, io.root.com.fasterxml.jackson.core:jackson-databind

CVE-2026-19032 in tools.jackson.core:jackson-databind - Patched by Root

tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind, io.root.tools.jackson.core:jackson-databind, io.root.com.fasterxml.jackson.core:jackson-databind

CVE-2026-83557 in tools.jackson.core:jackson-databind - Patched by Root

com.fasterxml.jackson.core:jackson-databind, tools.jackson.core:jackson-databind, io.root.com.fasterxml.jackson.core:jackson-databind, io.root.tools.jackson.core:jackson-databind

CVE-2026-91776 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

com.fasterxml.jackson.core:jackson-databind, tools.jackson.core:jackson-databind, io.root.com.fasterxml.jackson.core:jackson-databind, io.root.tools.jackson.core:jackson-databind

CVE-2026-68497 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

com.fasterxml.jackson.core:jackson-databind, tools.jackson.core:jackson-databind, io.root.com.fasterxml.jackson.core:jackson-databind, io.root.tools.jackson.core:jackson-databind

CVE-2026-91777 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

apache-commons-codec, apache-commons-io, apache-commons-logging, jsch, maven-file-management, opentest4j, glassfish-jsp, opentest4j, apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-framework-api, avalon-logkit, jsch, maven-file-management, opentest4j, apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-framework-api, avalon-logkit, jsch, maven-file-management, opentest4j, apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-logkit, jsch, maven-file-management, opentest4j, apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-logkit, jsch, maven-file-management, opentest4j, apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-framework-api, avalon-logkit, jsch, maven-file-management, opentest4j, apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-logkit, jsch, maven-file-management, opentest4j, apache-commons-codec, apache-commons-io, apache-commons-logging, jsch, maven-file-management, opentest4j, apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-framework-api, avalon-logkit, jsch, maven-file-management, opentest4j, apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-logkit, jsch, maven-file-management, opentest4j, apache-commons-codec, apache-commons-io, apache-commons-logging, jsch, maven-file-management, opentest4j

Security update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j

kernel-livepatch-SLE16-RT_Update_12

Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_11

Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_10

Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_9

Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_8

Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_7

Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_6

Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_4

Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_16

Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_15

Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_14

Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_13

Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_18

Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 16)

kernel-livepatch-SLE16-RT_Update_17

Security update for the Linux Kernel RT (Live Patch 17 for SUSE Linux Enterprise 16)

django

TuxCare security update for django (7 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (1 CVE)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (1 CVE)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (2 CVEs)

nvidia-open-driver-G06-signed, nvidia-open-driver-G06-signed-cuda

Security update for nvidia-open-driver-G06-signed

nvidia-open-driver-G06-signed, nvidia-open-driver-G06-signed-cuda

Security update for nvidia-open-driver-G06-signed

tools.jackson.core:jackson-databind

TuxCare security update for tools.jackson.core:jackson-databind (1 CVE)

pillow

TuxCare security update for pillow (1 CVE)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (1 CVE)

oauthlib

CVE-2026-49272 in oauthlib - Patched by Root

pyjwt

TuxCare security update for pyjwt (2 CVEs)

qtbase-opensource-src