{"id":"CVE-2026-0000","aliases":["ROOT-APP-NPM-CVE-2026-0000","ROOT-APP-PYPI-CVE-2026-0000"],"status":"published","title":"CVE-2026-0000 in react-leaflet-heatmap-layer - Patched by Root","description":"Root has patched CVE-2026-0000 in the react-leaflet-heatmap-layer package for Root:npm. Multiple fixed versions available.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-06-03T19:14:11Z","modified":"2026-08-31T16:45:04Z","fixes":[{"ecosystem":"Root:npm","package":"react-leaflet-heatmap-layer","fixed_in":["2.0.0-aikido.2"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@emilgroup/billing-sdk","fixed_in":["1.56.0-aikido.2","1.57.0-aikido.2"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@emilgroup/customer-sdk","fixed_in":["1.54.0-aikido.2"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@emilgroup/insurance-sdk","fixed_in":["1.98.0-aikido.3","1.97.0-aikido.3"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@opengov/ppf-backend-types","fixed_in":["1.141.1-aikido.2","1.141.3-aikido.3"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"axios","fixed_in":["1.14.0-aikido.3","1.14.0-aikido.4","1.14.0-aikido.5","1.14.0-aikido.6","1.14.0-aikido.7","1.14.0-aikido.8","1.14.0-aikido.9","1.14.0-aikido.10","1.14.0-aikido.11"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/react-leaflet-heatmap-layer","fixed_in":["2.0.0-root.io.2","2.0.0-root.io.1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/opengov__ppf-backend-types","fixed_in":["1.141.3-root.io.1","1.141.3-root.io.2","1.141.1-root.io.1","1.141.1-root.io.2","1.141.3-root.io.3"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/emilgroup__billing-sdk","fixed_in":["1.56.0-root.io.1","1.57.0-root.io.1","1.56.0-root.io.2","1.57.0-root.io.2"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/opengov__form-renderer","fixed_in":["0.2.19-root.io.1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/emilgroup__insurance-sdk","fixed_in":["1.97.0-root.io.1","1.98.0-root.io.1","1.97.0-root.io.2","1.98.0-root.io.2","1.98.0-root.io.3","1.97.0-root.io.3"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/opengov__form-builder","fixed_in":["0.12.2-root.io.1","0.13.0-root.io.1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/emilgroup__customer-sdk","fixed_in":["1.54.0-root.io.1","1.54.0-root.io.2"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/axios","fixed_in":["1.14.0-root.io.1","1.14.0-root.io.3","1.14.0-root.io.4","1.14.0-root.io.5","1.14.0-root.io.6","1.14.0-root.io.7","1.14.0-root.io.8","1.14.0-root.io.9","1.14.0-root.io.10","1.14.0-root.io.11"],"sources":["osv"]},{"ecosystem":"Root:PyPI","package":"rootio-litellm","fixed_in":["1.82.6+root.io.1","1.82.6+root.io.2","1.82.6+root.io.3"],"sources":["osv"]},{"ecosystem":"Root:PyPI","package":"rootio-telnyx","fixed_in":["4.87.0+root.io.1","4.88.1+root.io.1","4.87.0+root.io.2","4.88.1+root.io.2"],"sources":["osv"]},{"ecosystem":"Root:PyPI","package":"litellm","fixed_in":["1.82.6+aikido.3"],"sources":["osv"]},{"ecosystem":"Root:PyPI","package":"telnyx","fixed_in":["4.87.0+aikido.2","4.88.1+aikido.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Root:npm","package":"react-leaflet-heatmap-layer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-aikido.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@emilgroup/billing-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.56.0-aikido.2"},{"fixed":"1.57.0-aikido.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@emilgroup/customer-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.54.0-aikido.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@emilgroup/insurance-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.98.0-aikido.3"},{"fixed":"1.97.0-aikido.3"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@opengov/ppf-backend-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.141.1-aikido.2"},{"fixed":"1.141.3-aikido.3"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-aikido.3"},{"fixed":"1.14.0-aikido.4"},{"fixed":"1.14.0-aikido.5"},{"fixed":"1.14.0-aikido.6"},{"fixed":"1.14.0-aikido.7"},{"fixed":"1.14.0-aikido.8"},{"fixed":"1.14.0-aikido.9"},{"fixed":"1.14.0-aikido.10"},{"fixed":"1.14.0-aikido.11"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/react-leaflet-heatmap-layer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-root.io.2"},{"fixed":"2.0.0-root.io.1"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/opengov__ppf-backend-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.141.3-root.io.1"},{"fixed":"1.141.3-root.io.2"},{"fixed":"1.141.1-root.io.1"},{"fixed":"1.141.1-root.io.2"},{"fixed":"1.141.3-root.io.3"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/emilgroup__billing-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.56.0-root.io.1"},{"fixed":"1.57.0-root.io.1"},{"fixed":"1.56.0-root.io.2"},{"fixed":"1.57.0-root.io.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/opengov__form-renderer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.19-root.io.1"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/emilgroup__insurance-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.97.0-root.io.1"},{"fixed":"1.98.0-root.io.1"},{"fixed":"1.97.0-root.io.2"},{"fixed":"1.98.0-root.io.2"},{"fixed":"1.98.0-root.io.3"},{"fixed":"1.97.0-root.io.3"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/opengov__form-builder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.2-root.io.1"},{"fixed":"0.13.0-root.io.1"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/emilgroup__customer-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.54.0-root.io.1"},{"fixed":"1.54.0-root.io.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/axios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-root.io.1"},{"fixed":"1.14.0-root.io.3"},{"fixed":"1.14.0-root.io.4"},{"fixed":"1.14.0-root.io.5"},{"fixed":"1.14.0-root.io.6"},{"fixed":"1.14.0-root.io.7"},{"fixed":"1.14.0-root.io.8"},{"fixed":"1.14.0-root.io.9"},{"fixed":"1.14.0-root.io.10"},{"fixed":"1.14.0-root.io.11"}]}]},{"source":"osv","ecosystem":"Root:PyPI","package":"rootio-litellm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.82.6+root.io.1"},{"fixed":"1.82.6+root.io.2"},{"fixed":"1.82.6+root.io.3"}]}]},{"source":"osv","ecosystem":"Root:PyPI","package":"rootio-telnyx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.87.0+root.io.1"},{"fixed":"4.88.1+root.io.1"},{"fixed":"4.87.0+root.io.2"},{"fixed":"4.88.1+root.io.2"}]}]},{"source":"osv","ecosystem":"Root:PyPI","package":"litellm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.82.6+aikido.3"}]}]},{"source":"osv","ecosystem":"Root:PyPI","package":"telnyx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.87.0+aikido.2"},{"fixed":"4.88.1+aikido.2"}]}]}],"sources":{"osv":[{"id":"ROOT-APP-NPM-CVE-2026-0000","title":"CVE-2026-0000 in react-leaflet-heatmap-layer - Patched by Root","description":"Root has patched CVE-2026-0000 in the react-leaflet-heatmap-layer package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-08-31T15:24:06Z","modified":"2026-08-31T16:45:04.336688625Z","updated_at":"2026-11-02T15:53:27.362922Z"},{"id":"ROOT-APP-PYPI-CVE-2026-0000","title":"CVE-2026-0000 in rootio-litellm - Patched by Root","description":"Root has patched CVE-2026-0000 in the rootio-litellm package for Root:PyPI. Multiple fixed versions available.","status":"published","published":"2026-06-03T19:14:11Z","modified":"2026-06-04T02:00:16.712195382Z","updated_at":"2026-11-02T15:53:27.940619Z"}]}}