roo_code vulnerabilities

CVEs whose affected-version data names the roo_code package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-58371Critical· 9.8PoC

1y ago

Roo Code is an AI-powered autonomous coding agent that lives in users' editors

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.26.6 and below, a Github workflow used unsanitized pull request metadata in a privileged context, allowing an attacker to craft malicious input…

▾ Abyssalroocode · roo_codeEPSS 0.80%via NVD