Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Prototype Pollution
CVE-2026-85063
Affects
org.webjars.npm:csv-parse
| Versions
[0,]
C
Improper Certificate Validation
CVE-2026-85525
Affects
net.snowflake:snowflake-jdbc
| Versions
[,4.3.4)
H
Uncaught Exception
CVE-2026-85014
Affects
org.webjars.npm:undici
| Versions
[7.12.0,]
M
Insufficient Verification of Data Authenticity
CVE-2026-85008
Affects
org.webjars.npm:undici
| Versions
[7.12.0,]
C
Improper Certificate Validation
CVE-2026-84961
Affects
org.webjars.npm:undici
| Versions
[7.27.1,]
H
Use of Persistent Cookies Containing Sensitive Information
CVE-2026-84933
Affects
org.webjars.npm:undici
| Versions
[7.12.0,]
M
Numeric Truncation Error
CVE-2026-84947
Affects
org.webjars.npm:undici
| Versions
[7.12.0,]
M
HTTP Request Smuggling
CVE-2026-18540
Affects
org.webjars.npm:undici
| Versions
[,6.28.1)
[7.12.0,]
H
Uncaught Exception
CVE-2026-19534
Affects
org.webjars.npm:undici
| Versions
[6.23.0,6.28.1)
[7.12.0,]
H
Allocation of Resources Without Limits or Throttling
CVE-2026-84890
Affects
org.webjars.npm:undici
| Versions
[7.16.0,]
H
Missing Release of Resource after Effective Lifetime
CVE-2026-18149
Affects
org.webjars.npm:undici
| Versions
[7.12.0,]
H
Improper Verification of Cryptographic Signature
CVE-2026-85393
Affects
org.webjars.npm:node-forge
| Versions
[0,]
C
Remote Code Execution (RCE)
Affects
org.webjars.npm:vm2
| Versions
[0,]
H
Infinite loop
CVE-2026-43871
Affects
org.apache.thrift:libthrift
| Versions
[,0.24.0)
H
Improper Encoding or Escaping of Output
CVE-2026-84292
Affects
org.webjars.npm:fast-uri
| Versions
[0,]
H
Out-of-bounds Read
CVE-2026-64609
Affects
org.apache.fury:fury-core
| Versions
[0.5.0,]
H
Out-of-bounds Read
CVE-2026-64609
Affects
org.apache.fory:fory-core
| Versions
[,1.4.0)
M
Improper Protection of Alternate Path
CVE-2026-66756
Affects
org.apache.tika:tika-server
| Versions
[4.0.0-alpha-1,4.0.0-beta-1)
M
Cross-site Scripting (XSS)
CVE-2026-76985
Affects
org.apache.wicket:wicket-extensions
| Versions
[1.4.0,8.19.0)
[9.0.0-M1,9.24.0)
[10.0.0-M1,10.11.0)
M
Cross-site Scripting (XSS)
CVE-2026-76984
Affects
org.apache.wicket:wicket-core
| Versions
[6.17.0,8.19.0)
[9.0.0-M1,9.24.0)
[10.0.0-M1,10.11.0)
M
Cross-site Scripting (XSS)
CVE-2026-76986
Affects
org.apache.wicket:wicket-core
| Versions
[1.5.0,8.19.0)
[9.0.0-M1,9.24.0)
[10.0.0-M1,10.11.0)
H
Missing Authorization
CVE-2026-49326
Affects
org.apache.hbase:hbase-thrift
| Versions
[2.5.0,2.5.15)
[2.6.0,2.6.6)
[3.0.0-alpha-1,3.0.0-beta-1)
M
Cross-site Scripting (XSS)
CVE-2026-76983
Affects
org.apache.wicket:wicket-core
| Versions
[1.5.0,8.19.0)
[9.0.0-M1,9.24.0)
[10.0.0-M1,10.11.0)
M
Cross-site Scripting (XSS)
CVE-2026-75802
Affects
org.apache.wicket:wicket-extensions
| Versions
[1.4.0,8.19.0)
[9.0.0-M1,9.24.0)
[10.0.0-M1,10.11.0)
H
Cross-site Request Forgery (CSRF)
CVE-2026-28813
Affects
org.apache.jspwiki:jspwiki-main
| Versions
[,2.12.4-RC2)
H
Directory Traversal
CVE-2026-62391
Affects
org.apache.kyuubi:kyuubi-server_2.12
| Versions
[1.6.0,1.12.0)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-68078
Affects
org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol
| Versions
[,10.1.0)
M
Cross-site Scripting (XSS)
CVE-2026-66390
Affects
org.apache.wicket:wicket-core
| Versions
[9.0.0-M1, 10.10.0)
M
Directory Traversal
CVE-2026-70449
Affects
org.apache.wicket:wicket-core
| Versions
[,8.19.0)
[9.0.0-M1, 9.24.0)
[10.0.0-M1, 10.10.0)
M
Cross-site Scripting (XSS)
CVE-2026-84369
Affects
org.webjars.npm:svgo
| Versions
[,2.8.4)
[3.0.0,3.3.5)
[4.0.0-rc.0,4.1.0)