Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Root npm cacheable-request data exposure risk
published 2 months ago
Summary
The cacheable-request package in Root's npm repository had a vulnerability that could allow an attacker to access sensitive data. This has been patched, and users should update to the latest version to protect their data.
What to do
- Update rootio @rootio/cacheable-request to version 2.1.4-root.io.1.
- Update jaredwray cacheable-request to version 2.1.4-aikido.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:npm | rootio | @rootio/cacheable-request |
< 2.1.4-root.io.1 Fix: upgrade to 2.1.4-root.io.1
|
| Root:npm | jaredwray | cacheable-request |
< 2.1.4-aikido.1 Fix: upgrade to 2.1.4-aikido.1
|
Original advisory text
GHSA-8x6c-cv3v-vp6g in cacheable-request - Patched by Root
Root has patched GHSA-8x6c-cv3v-vp6g in the cacheable-request package for Root:npm. Multiple fixed versions available.
Timeline
Published17 Aug 2026
Updated17 Aug 2026
First seen17 Aug 2026
Sources
Track software like this
Free during beta