AdvisoriesToolsStatsChecklistSubmitGet the email
← All tools
IDEs & agents · Roo Code

Roo Code

Open-source VS Code coding agent forked from Cline.

1Advisories
0critical
1high
0medium
2026-10-13Latest
Timeline · advisories per quarter
12026 Q4
Named in sources

Reported for Roo Code

01. highPrompt injectionNew this weekRoo Code: five ways to slip denied commands past auto-approve (CVE-2026-110202 to 110206), no fix comingRoo Code through 3.54.0 has five command-approval bypasses. With auto-approve on, a prompt injection can get a denied shell command run on your machine by hiding it behind an allowlisted command like echo. The project was archived in May 2026, so no patch is expected. Roo Code Cline 2026-10-13
The weekly email

One email a week. Only what changed.

New advisories, CVEs and fixes for Lovable, Bolt, v0, Replit, Base44 and Cursor apps. No roundups of things you already read.

Free. The list is new, so the first issues go out once there are readers. Unsubscribe from any email in one click. We never sell or share addresses.