rollup vulnerabilities

CVEs whose affected-version data names the rollup package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-27606Critical· 9.8PoC

7mo ago

Rollup is a module bundler for JavaScript

Rollup is a module bundler for JavaScript. Versions prior to 2.80.0, 3.30.0, and 4.59.0 of the Rollup module bundler (specifically v4.x and present in current source) is vulnerable to an Arbitrary File Write via Path Traversal. Insecure …

▾ Abyssalrollupjs · rollupEPSS 1.5%via NVD