COOEY // HUBcompliance · community · intelligence

FAIL › dossier

rollupjs vendor

1
failure events
0
zero-days
1
RCEs
0
on KEV
1
critical
50
worst shame

Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.

Failure history 1 events

DateEventSevFlagsShameSummary
2026-02-25 CVE-2026-27606 critical ⚡RCE 50 Rollup is a module bundler for JavaScript. Versions prior to 2.80.0, 3.30.0, and 4.59.0 of the Rollup module bundler (specifically v4.x and present in current source) is vulnerable to an Arbitrary File Write via Path Traversal. Insecure file name sanitization in the core engine a