目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

RooCodeInc 厂商漏洞列表 / CVE 中文分析 11

RooCodeInc 厂商相关 11 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

RooCodeInc 是一家专注于软件开发工具的企业，其产品主要面向开发者提供代码生成和优化服务。历史漏洞分析显示，其产品曾存在远程代码执行、跨站脚本请求伪造和权限绕过等安全问题。截至最新统计，该厂商相关产品已记录 11 条 CVE 漏洞，其中多个被归类为高危级别。安全社区建议用户及时更新至最新版本，并实施最小权限原则以降低潜在风险。

件 11 件の結果 / 11フィルターをクリア
上位製品 RooCodeInc: Roo-Code
CVE IDタイトルCVSS深刻度公開日
CVE-2025-65946 Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation Bug — Roo-CodeCWE-77 8.1 High2025-11-21
CVE-2025-58374 Roo Code: Auto-approve allows npm install execution of malicious postinstall scripts — Roo-CodeCWE-78 7.8 High2025-09-06
CVE-2025-58373 Roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosure — Roo-CodeCWE-59 5.5 Medium2025-09-05
CVE-2025-58372 Roo Code: Potential Remote Code Execution via .code-workspace — Roo-CodeCWE-732 8.1 High2025-09-05
CVE-2025-58371 Roo Code is vulnerable to command injection via GitHub actions workflow — Roo-CodeCWE-78 8.8AIHighAI2025-09-05
CVE-2025-58370 Roo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect Reference — Roo-CodeCWE-78 8.1 High2025-09-05
CVE-2025-57771 Roo-Code potential remote code execution via auto-execute command parsing flaw — Roo-CodeCWE-78 8.1 High2025-08-22
CVE-2025-54377 Roo Code Lacks Line Break Validation in its Command Execution Tool — Roo-CodeCWE-77 7.8 High2025-07-23
CVE-2025-53536 Roo Code allows Potential Remote Code Execution via .vscode/settings.json — Roo-CodeCWE-552 8.1 High2025-07-07
CVE-2025-53098 Roo Code Vulnerable to Potential Remote Code Execution via Model Context Protocol — Roo-CodeCWE-77 8.1 High2025-06-27
CVE-2025-53097 Roo Code extension vulnerable to Potential Information Leakage via JSON Schema — Roo-CodeCWE-74 5.9 Medium2025-06-27

本页汇总了 RooCodeInc 厂商截至目前公开的全部 11 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。