Rollup vulnerabilities
We track 1 vulnerability in Rollup products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 25, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Rollup vulnerabilities
- 9.8 Critical severity
rollup: Improper Limitation of a Pathname to a Restricted Directory
Rollup is a module bundler for JavaScript. Versions prior to 2.80.0, 3.30.0, and 4.59.0 of the Rollup module bundler (specifically v4.x and present in current source) is vulnerable to an Arbitrary File Write via Path Traversal. Insecure file name sanitization