Rojo-Rbx Rojo

1 CVEs affecting Rojo-Rbx Rojo. Latest disclosed: 2026-09-25. Critical: 0, High: 1.

Top CVEs affecting Rojo-Rbx Rojo
CVESeverityScorePublishedSummary
CVE-2026-97875High8.12026-09-25Rojo's "rojo serve" HTTP API (default port 34872) has no Host/Origin header validation, making it vulnerable to DNS rebinding. A malicious webpage can read all…