Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo
cocoapods
Composer
Conan
Go
hex
Maven
npm
NuGet
pip
pub
RubyGems
Swift
Unmanaged (C/C++)
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
VULNERABILITY
AFFECTS
TYPE
PUBLISHED
C
Deserialization of Untrusted Data
llamafactory
[0,]
pip
17 Sept 2025
M
Use of a Broken or Risky Cryptographic Algorithm
hydrolib-core
[,0.9.1)
pip
17 Sept 2025
H
Race Condition
@genkit-ai/firebase
<0.9.1
npm
17 Sept 2025
H
Race Condition
@genkit-ai/core
<0.9.1
npm
17 Sept 2025
H
Directory Traversal
mapproxy
[,4.0.2)
pip
17 Sept 2025
M
Use of Default Credentials
com.liferay.portal:com.liferay.portal.impl
[,97.0.0)
Maven
17 Sept 2025
L
External Control of System or Configuration Setting
com.liferay.portal:com.liferay.portal.kernel
[,130.0.1)
Maven
17 Sept 2025
L
External Control of System or Configuration Setting
com.liferay:com.liferay.staging.taglib
[,8.0.4)
Maven
17 Sept 2025
M
Improper Validation of Specified Quantity in Input
com.liferay:com.liferay.cookies.impl
[,1.0.12)
Maven
17 Sept 2025
H
Allocation of Resources Without Limits or Throttling
open5gs/open5gs
[0,]
Unmanaged (C/C++)
17 Sept 2025
H
Reachable Assertion
open5gs/open5gs
[,2.7.6)
Unmanaged (C/C++)
17 Sept 2025
H
Improper Authentication
github.com/spectolabs/hoverfly/core/handlers/v2
<1.12.0
Go
17 Sept 2025
C
Command Injection
github.com/spectolabs/hoverfly/core/handlers/v2
<1.12.0
Go
17 Sept 2025
C
Command Injection
github.com/spectolabs/hoverfly/core
<1.12.0
Go
17 Sept 2025
H
Server-side Request Forgery (SSRF)
ip
*
npm
16 Sept 2025
H
Server-side Request Forgery (SSRF)
ip
*
npm
16 Sept 2025
C
Malicious Package
xo-angular-ui-utils
*
npm
16 Sept 2025
C
Malicious Package
xo-wallet-components
*
npm
16 Sept 2025
C
Malicious Package
conditionsjs
*
npm
16 Sept 2025
C
Malicious Package
jsonwebjstoken
*
npm
16 Sept 2025
C
Malicious Package
oci-plugin-compliance
*
npm
16 Sept 2025
C
Malicious Package
@fastifyv4/fastifyv4
*
npm
16 Sept 2025
C
Malicious Package
@pumpfun-sdk/bn-converter
*
npm
16 Sept 2025
C
Malicious Package
1xbet-prilozhenie-android-guid-bu43so24l
*
npm
16 Sept 2025
C
Malicious Package
alert-codestreamer
*
npm
16 Sept 2025
C
Malicious Package
sensay-cli
*
npm
16 Sept 2025
C
Malicious Package
@mic-security/complex-components
*
npm
16 Sept 2025
C
Malicious Package
ts-jito
*
npm
16 Sept 2025
C
Malicious Package
openzeppelin-compact
*
npm
16 Sept 2025
C
Malicious Package
login-tokenizer
*
npm
16 Sept 2025