R
Vendor security profile
roocode
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical1
CISA KEV0
Public exploit5
Patch rate%17
Avg. CVSS8.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
5
CVE KEV
CVE severity distribution
6toplam CVE
Critical1 (17%)
High5 (83%)
Patch and exploitation view
%17
Verified patch
%0
CISA KEV
%83
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
7.7
CVE-2026-110206Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Position
Patch status unknownEPSS %0
7.7
CVE-2026-110205Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitution
Patch status unknownEPSS %0
7.7
CVE-2026-110204Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitution
Patch status unknownEPSS %0
7.7
CVE-2026-110203Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronization
Patch status unknownEPSS %0
7.7
CVE-2026-110202Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Stripping
Patch status unknownEPSS %0
7.7
7.7
6.3
CVE-2026-81836RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmission
Patch status unknownEPSS %0