Known vulnerabilities in Rollup

Vendor: Rollup
Software: Rollup
Software CPE: cpe:2.3:a:rollup:rollup:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Rollup Rollup is affected by 2 known vulnerabilities: 1 high, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123174 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-27606
CWE-22 High
Available
No
2.80.0, 3.30.0, 4.59.0 24.02.2026 SB2026022445
SB2026040631
SB2026040632
and 2 more
#VU97705 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47068
CWE-79 Low
No
No
3.29.5, 4.22.4 25.09.2024 SB2024092534
SB20241022349
SB2025011306
and 3 more