Roo Code
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 16 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 27, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Position
Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitution
Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronization
Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitution
Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Stripping
Roo Code 3.54.0 Command Injection via Parameter Expansion Parsing
Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation Bug
Roo Code: Auto-approve allows npm install execution of malicious postinstall scripts
Roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosure
Monitor Roo Code in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.