vulnerability in CVE-2026-56337 (CVE-2026-56337). Risk of unauthorized operations or information disclosure. Exploitable via `POST /rest/v1/rpc/exist_app_v2`.
vulnerability in CVE-2026-56310 (CVE-2026-56310). Risk of unauthorized operations or information disclosure. Exploitable via `GET /organization/members`.
vulnerability in io.root.org.apache.kafka:kafka-clients (ROOT-APP-MAVEN-CVE-2024-31141). Confidential information can be exposed externally. Mitigation: upgrade to `3.6.0-root.io.2, 3.6.0-root.io.3, 3.0.0-root.io.1, 3.7.1-root.io.1, 3.7.1-root.io.2, 3.7.1-root.io.3` or later.
vulnerability in webkit2gtk3 (SUSE-SU-2026:2623-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.52.4-4.60.2` or later.