roocode
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 27, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation Bug
Roo Code: Auto-approve allows npm install execution of malicious postinstall scripts
Roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosure
Roo Code: Potential Remote Code Execution via .code-workspace
Roo Code is vulnerable to command injection via GitHub actions workflow
Roo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect Reference
Roo Code Lacks Line Break Validation in its Command Execution Tool
Roo Code allows Potential Remote Code Execution via .vscode/settings.json
Roo Code Vulnerable to Potential Remote Code Execution via Model Context Protocol
Monitor roocode in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.