Root has patched CVE-2026-52870 in the rootio-mcp package for Root:PyPI. Multiple fixed versions available.
{ "distro_version": "", "distro": "pypi", "severity": "HIGH", "source": "Root" }
"1.27.0"
[ "1.27.0+root.io.1" ]
"root.io.1"
true
"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-52870.json"
1.0