Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Origin Validation Error
CVE-2026-19418
Affects
typo3/cms-install
| Versions
>=13.0.0, <13.4.34
>=14.0.0, <14.3.6
H
Origin Validation Error
CVE-2026-19418
Affects
typo3/cms-core
| Versions
>=13.0.0, <13.4.34
>=14.0.0, <14.3.6
H
Origin Validation Error
CVE-2026-19418
Affects
typo3/cms-backend
| Versions
>=13.0.0, <13.4.34
>=14.0.0, <14.3.6
C
Use of a Key Past its Expiration Date
CVE-2026-39923
Affects
flarum/framework
| Versions
<1.8.16
H
Insufficient Session Expiration
CVE-2026-39924
Affects
flarum/framework
| Versions
<1.8.16
M
CSV Injection
CVE-2026-18738
Affects
shlinkio/shlink
| Versions
>=5.0.0
H
SQL Injection
CVE-2026-18737
Affects
shlinkio/shlink
| Versions
>=3.3.1
M
Cross-site Scripting (XSS)
CVE-2026-67617
Affects
microweber/microweber
| Versions
>=0.0.0
M
Incorrect Implementation of Authentication Algorithm
CVE-2026-11430
Affects
getgrav/grav
| Versions
<2.0.9
M
Incomplete Denylist to Cross-Site Scripting
CVE-2026-71478
Affects
league/commonmark
| Versions
>=1.5.0, <2.9.0
H
Inefficient Algorithmic Complexity
Affects
league/commonmark
| Versions
>=2.0.0, <2.9.0
M
Directory Traversal
CVE-2026-62996
Affects
smarty/smarty
| Versions
>=5.0.0, <5.8.4
H
SQL Injection
CVE-2026-41453
Affects
krayin/laravel-crm
| Versions
<2.2.4
M
Use of Less Trusted Source
CVE-2026-63220
Affects
codeigniter4/framework
| Versions
<4.7.4
M
Cross-site Scripting (XSS)
CVE-2026-54717
Affects
silverstripe/cms
| Versions
<6.2.1
H
Directory Traversal
CVE-2026-69089
Affects
getgrav/grav
| Versions
<2.0.11
H
Arbitrary Code Injection
CVE-2026-69088
Affects
getgrav/grav
| Versions
>=2.0.7, <2.0.11
M
Asymmetric Resource Consumption (Amplification)
Affects
league/commonmark
| Versions
>=2.0.0, <2.9.0
H
Inefficient Algorithmic Complexity
Affects
league/commonmark
| Versions
>=1.5.0, <2.9.0
H
Excessive Platform Resource Consumption within a Loop
CVE-2026-71488
Affects
league/commonmark
| Versions
>=0.6.0, <2.9.0
H
Inefficient Algorithmic Complexity
Affects
league/commonmark
| Versions
>=1.5.0, <2.9.0
M
Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-69127
Affects
getkirby/cms
| Versions
<4.9.5
>=5.0.0-alpha.1, <5.5.2
M
Missing Authorization
CVE-2026-64664
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
M
Arbitrary File Upload
CVE-2026-71434
Affects
statamic/cms
| Versions
<5.74.3
>=6.0.0, <6.24.2
M
Cross-site Scripting (XSS)
CVE-2026-71435
Affects
statamic/cms
| Versions
<5.74.3
>=6.0.0, <6.24.2
H
Missing Authorization
CVE-2026-64662
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-64663
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
C
User Impersonation
CVE-2026-64665
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
M
Exposure of Resource to Wrong Sphere
CVE-2026-72782
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.2
>=5.0.0-RC1, <5.10.6
M
Cross-site Scripting (XSS)
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.10.8