node-rollup vulnerabilities (Debian)

2 vulnerabilities.

• node-rollup Debian Rollup 4 has Arbitrary File Write via Path Traversal CVE-2026-27606 Public exploitFix available 8.8 HighFebruary 25, 2026
• node-rollup Debian DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS CVE-2024-47068 Fix available 6.1 MediumSeptember 23, 2024