Debian/node-rollup: critical 9.8
Rollup is a module bundler for JavaScript. Versions prior to 2.80.0, 3.30.0, and 4.59.0 of the Rollup module bundler (specifically v4.x and present in current source) is vulnerable to an Arbitrary Fil
Action: Upgrade node-rollup to 3.30.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.30.0-1 | - |
Fixed versions
| 3.30.0-1 |
Sources
- osv: DEBIAN-CVE-2026-27606#Debian:14/node-rollup
- https://security-tracker.debian.org/tracker/CVE-2026-27606
published · modified · JSON