Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Exposure of Resource to Wrong Sphere
CVE-2026-34217
Affects
@nyariv/sandboxjs
| Versions
<0.8.36
C
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-34208
Affects
@nyariv/sandboxjs
| Versions
<0.8.36
M
Uncontrolled Recursion
CVE-2026-34211
Affects
@nyariv/sandboxjs
| Versions
<0.8.36
M
Directory Traversal
CVE-2026-34523
Affects
sillytavern
| Versions
<1.17.0
H
External Control of File Name or Path
CVE-2026-34522
Affects
sillytavern
| Versions
<1.17.0
H
Directory Traversal
CVE-2026-34524
Affects
sillytavern
| Versions
<1.17.0
M
Server-side Request Forgery (SSRF)
CVE-2026-34526
Affects
sillytavern
| Versions
<1.17.0
M
Directory Traversal
CVE-2026-34451
Affects
@anthropic-ai/sdk
| Versions
>=0.79.0 <0.81.0
M
Server-side Request Forgery (SSRF)
CVE-2026-5323
Affects
a11y-mcp
| Versions
<1.0.5
H
Not Failing Securely ('Failing Open')
CVE-2026-35042
Affects
fast-jwt
| Versions
*
L
Use After Free
CVE-2026-34764
Affects
electron
| Versions
>=33.0.0-alpha.1 <39.8.5
>=40.0.0-alpha.2 <40.8.5
>=41.0.0-alpha.1 <41.1.0
>=42.0.0-alpha.1 <42.0.0-alpha.5
M
Open Redirect
CVE-2026-35411
Affects
directus
| Versions
<11.16.1
H
Incorrect Authorization
CVE-2026-35412
Affects
directus
| Versions
<11.16.1
H
Cleartext Storage of Sensitive Information
Affects
directus
| Versions
<11.17.0
H
Incorrect Authorization
CVE-2026-35442
Affects
directus
| Versions
<11.17.0
H
Server-side Request Forgery (SSRF)
CVE-2026-35409
Affects
directus
| Versions
<11.16.0
H
Improperly Controlled Modification of Dynamically-Determined Object Attributes
Affects
directus
| Versions
<11.17.0
H
Allocation of Resources Without Limits or Throttling
CVE-2026-35441
Affects
directus
| Versions
<11.17.0
C
Protection Mechanism Failure
CVE-2026-35408
Affects
directus
| Versions
<11.17.0
H
Allocation of Resources Without Limits or Throttling
Affects
directus
| Versions
<11.17.0
H
Regular Expression Denial of Service (ReDoS)
CVE-2026-35213
Affects
@hapi/content
| Versions
<6.0.1
M
Information Exposure
CVE-2026-35413
Affects
directus
| Versions
<11.16.1
M
Open Redirect
CVE-2026-35410
Affects
directus
| Versions
<11.16.1
C
Malicious Package
Affects
strapi-plugin-blurhash
| Versions
*
C
Malicious Package
Affects
strapi-plugin-advanced-uuid
| Versions
*
C
Malicious Package
Affects
strapi-plugin-guardarian-ext
| Versions
*
C
Malicious Package
Affects
strapi-plugin-health-check
| Versions
*
C
Malicious Package
Affects
strapi-plugin-debug-tools
| Versions
*
C
Malicious Package
Affects
strapi-plugin-content-sync
| Versions
*
C
Malicious Package
Affects
strapi-plugin-cms-tools
| Versions
*