Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Directory TraversalCVE-2026-22739
Affects org.springframework.cloud:spring-cloud-config-server | Versions [,4.3.2)[5.0.0-M1, 5.0.2)
Has fix
MavenPublished 24 Mar 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2026-4258
Affects org.webjars.npm:sjcl | Versions [0,]
Has fix
MavenPublished 23 Mar 2026
  • C
Race ConditionCVE-2026-32887
Affects org.webjars.npm:effect | Versions [0,]
Has fix
MavenPublished 22 Mar 2026
  • M
CRLF Injection
Affects org.webjars.npm:h3 | Versions [1.0.2,]
Has fix
MavenPublished 22 Mar 2026
  • H
Directory Traversal
Affects org.webjars.npm:h3 | Versions [1.0.2,]
Has fix
MavenPublished 22 Mar 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-25534
Affects io.spinnaker.orca:orca-core | Versions [,2025.2.4)[2025.3.0,2025.3.1)[2025.4.0,2025.4.1)[2026.0.0,]
Has fix
MavenPublished 20 Mar 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-25534
Affects io.spinnaker.clouddriver:clouddriver-artifacts | Versions [,2025.2.4)[2025.3.0,2025.3.1)[2025.4.0,2025.4.1)[2026.0.0,]
Has fix
MavenPublished 20 Mar 2026
  • M
Cross-site Scripting (XSS)CVE-2023-1932
Affects org.hibernate:hibernate-validator | Versions [,6.2.0)
Has fix
MavenPublished 20 Mar 2026
  • M
Arbitrary Code InjectionCVE-2025-35036
Affects org.hibernate:hibernate-validator | Versions [,6.2.0.CR1)[7.0.0.Alpha1,7.0.0.CR1)
Has fix
MavenPublished 20 Mar 2026
  • H
Directory TraversalCVE-2026-22737
Affects springframework:spring-webmvc | Versions [0,]
Has fix
MavenPublished 20 Mar 2026
  • H
Directory TraversalCVE-2026-22737
Affects org.springframework:spring-webmvc | Versions [,6.2.17)[7.0.0-M1,7.0.6)
Has fix
MavenPublished 20 Mar 2026
  • H
Directory TraversalCVE-2026-22737
Affects org.springframework:spring-webflux | Versions [,6.2.17)[7.0.0-M1,7.0.6)
Has fix
MavenPublished 20 Mar 2026
  • H
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-22731
Affects org.springframework.boot:spring-boot-actuator | Versions [3.4.0,3.5.12)[4.0.0-M1,4.0.4)
Has fix
MavenPublished 20 Mar 2026
  • H
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-22731
Affects org.springframework.boot:spring-boot-actuator-autoconfigure | Versions [3.4.0,3.5.12)[4.0.0-M1,4.0.4)
Has fix
MavenPublished 20 Mar 2026
  • H
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-22733
Affects org.springframework.boot:spring-boot-actuator | Versions [,3.5.12)[4.0.0-M1,4.0.4)
Has fix
MavenPublished 20 Mar 2026
  • H
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-22733
Affects org.springframework.boot:spring-boot-actuator-autoconfigure | Versions [,3.5.12)[4.0.0-M1,4.0.4)
Has fix
MavenPublished 20 Mar 2026
  • C
Use of Cache Containing Sensitive InformationCVE-2026-22732
Affects org.springframework.security:spring-security-web | Versions [,6.5.9)[7.0.0-M1,7.0.4)
Has fix
MavenPublished 20 Mar 2026
  • L
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-22735
Affects springframework:spring-web | Versions [0,]
Has fix
MavenPublished 20 Mar 2026
  • L
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-22735
Affects springframework:spring-webmvc | Versions [0,]
Has fix
MavenPublished 20 Mar 2026
  • L
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-22735
Affects org.springframework:spring-webmvc | Versions [,6.2.17)[7.0.0,7.0.6)
Has fix
MavenPublished 20 Mar 2026
  • L
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-22735
Affects org.springframework:spring-web | Versions [,6.2.17)[7.0.0,7.0.6)
Has fix
MavenPublished 20 Mar 2026
  • H
DNS RebindingCVE-2026-33002
Affects org.jenkins-ci.main:jenkins-core | Versions [2.426.3,2.427)[2.442,2.555)
Has fix
MavenPublished 20 Mar 2026
  • H
UNIX Symbolic Link (Symlink) FollowingCVE-2026-33001
Affects org.jenkins-ci.main:jenkins-core | Versions [,2.555)
Has fix
MavenPublished 20 Mar 2026
  • C
Prototype PollutionCVE-2026-33228
Affects org.webjars.npm:flatted | Versions [0,]
Has fix
MavenPublished 20 Mar 2026
  • H
Improper Validation of Specified Quantity in InputCVE-2026-33349
Affects org.webjars.npm:fast-xml-parser | Versions [4.0.0-beta.8,]
Has fix
MavenPublished 20 Mar 2026
  • H
Timing AttackCVE-2026-33129
Affects org.webjars.npm:h3 | Versions [1.0.2,]
Has fix
MavenPublished 19 Mar 2026
  • M
CRLF InjectionCVE-2026-33128
Affects org.webjars.npm:h3 | Versions [1.0.2,]
Has fix
MavenPublished 19 Mar 2026
  • H
Improper Removal of Sensitive Information Before Storage or TransferCVE-2026-33180
Affects ca.uhn.hapi.fhir:org.hl7.fhir.utilities | Versions [,6.9.0)
Has fix
MavenPublished 19 Mar 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-4366
Affects org.keycloak:keycloak-services | Versions [0,]
Has fix
MavenPublished 19 Mar 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-26801
Affects org.webjars.npm:pdfmake | Versions [0.3.0-beta.4,]
Has fix
MavenPublished 18 Mar 2026