Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Cross-site Scripting (XSS)
CVE-2026-113654
Affects
sanitize-html
| Versions
<2.18.0
L
Cross-site Scripting (XSS)
CVE-2026-113657
Affects
sanitize-html
| Versions
>=2.17.7 <2.18.0
M
Uncontrolled Recursion
CVE-2026-113650
Affects
sanitize-html
| Versions
>=2.18.0 <2.18.1
M
Cross-site Scripting (XSS)
CVE-2026-113661
Affects
sanitize-html
| Versions
<2.18.0
H
Allocation of Resources Without Limits or Throttling
CVE-2026-111751
Affects
@angular/router
| Versions
>=22.0.0 <22.2.1
>=21.2.0 <21.2.25
H
Asymmetric Resource Consumption (Amplification)
CVE-2026-111752
Affects
@angular/router
| Versions
<20.3.33
>=21.0.0 <21.2.25
>=22.0.0 <22.2.1
H
Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-111756
Affects
follow-redirects
| Versions
>=1.16.0 <1.16.1
C
Malicious Package
Affects
nwfp-build-config
| Versions
=1.0.0
=0.0.0-stage
C
Malicious Package
Affects
unicode-title-normalizer
| Versions
*
C
Malicious Package
Affects
formatting-subtitles-for-claude
| Versions
*
C
Malicious Package
Affects
@platform-services/hrm-mfe-core
| Versions
=99.9.1
M
Path Equivalence
CVE-2026-110095
Affects
fast-uri
| Versions
<2.4.8
>=3.0.0 <3.1.9
>=4.0.0 <4.2.3
M
Improper Validation of Specified Quantity in Input
CVE-2026-110180
Affects
fast-uri
| Versions
>=2.4.2 <2.4.8
>=3.1.3 <3.1.9
>=4.0.1 <4.2.3
M
Encoding Error
CVE-2026-110306
Affects
fast-uri
| Versions
<2.4.8
>=3.0.0 <3.1.9
>=4.0.0 <4.2.3
M
Path Equivalence
CVE-2026-110725
Affects
fast-uri
| Versions
<2.4.8
>=3.0.0 <3.1.9
>=4.0.0 <4.2.3
M
Information Exposure
CVE-2026-105828
Affects
parse-server
| Versions
>=9.0.0 <9.10.1-alpha.12
>=8.2.2 <8.6.92
H
Uncaught Exception
CVE-2026-110854
Affects
parse-server
| Versions
>=9.0.0 <9.10.2-alpha.6
<8.6.97
H
Race Condition
CVE-2026-109954
Affects
parse-server
| Versions
>=9.0.0 <9.10.2-alpha.5
>=5.4.0 <8.6.96
M
Authorization Bypass Through User-Controlled Key
CVE-2026-109303
Affects
parse-server
| Versions
>=9.0.0 <9.10.1-alpha.13
<8.6.93
M
Incorrect Authorization
CVE-2026-109302
Affects
parse-server
| Versions
>=9.0.0 <9.10.1-alpha.14
>=8.2.2 <8.6.94
H
Uncaught Exception
CVE-2026-109301
Affects
parse-server
| Versions
>=9.0.0 <9.10.2-alpha.3
<8.6.95
L
Incorrect Authorization
CVE-2026-112769
Affects
parse-server
| Versions
>=9.0.0 <9.10.3-alpha.1
<8.6.98
M
Incorrect Authorization
CVE-2026-112768
Affects
parse-server
| Versions
>=9.0.0 <9.10.3-alpha.2
<8.6.99
C
Malicious Package
Affects
animatecss-tailwind-helper
| Versions
=2.0.6
C
Malicious Package
Affects
animate-twcss-bridge
| Versions
=2.0.6
C
Malicious Package
Affects
animate-twcss-pack
| Versions
=2.0.6
C
Malicious Package
Affects
animatecss-tailwind-binary
| Versions
=2.0.6
C
Malicious Package
Affects
sc-announcer
| Versions
=99.9.1
C
Malicious Package
Affects
tailwind-kinetic
| Versions
=2.0.8
=2.0.6
C
Malicious Package
Affects
animatecss-tailwind-luminary
| Versions
=2.0.7
=2.0.6