Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
Remote Code Execution
CVE-2026-46581
Affects
org.glassfish:jakarta.faces
| Versions
[,4.0.22)
[4.0.23,4.1.13)
L
Missing Authorization
CVE-2026-15916
Affects
drupal/core
| Versions
<10.6.13
>=11.0.0-alpha1, <11.3.14
>=11.4.0, <11.4.4
M
Cross-site Scripting (XSS)
CVE-2026-55805
Affects
drupal/core
| Versions
<10.6.13
>=11.0.0-alpha1, <11.3.14
>=11.4.0, <11.4.4
H
Improper Certificate Validation
CVE-2026-46968
Affects
openjdk
| Versions
[,8.0.502)
[11.0.0,11.0.32)
[17.0.0,17.0.20)
[21.0.0,21.0.12)
[25.0.0,25.0.4)
[26.0.0,26.0.2)
H
Improper Certificate Validation
CVE-2026-46968
Affects
org.graalvm.sdk:graal-sdk
| Versions
[,17.0.20)
[21.0.0,21.0.12)
H
Improper Certificate Validation
CVE-2026-46968
Affects
openjdk-jre
| Versions
[,1.8.0_502)
[11.0.0,11.0.32)
[17.0.0,17.0.20)
[21.0.0,21.0.12)
[25.0.0,25.0.4)
[26.0.0,26.0.2)
H
Server-side Request Forgery (SSRF)
CVE-2026-73334
Affects
org.apache.parquet:parquet-hadoop
| Versions
[1.12,1.18.1)
H
Insertion of Sensitive Information into Log File
CVE-2026-86597
Affects
snowflake-connector-python
| Versions
[,4.7.3)
M
Incomplete List of Disallowed Inputs
CVE-2026-85788
Affects
awslabs.mysql-mcp-server
| Versions
[,1.0.23)
M
Relative Path Traversal
CVE-2026-84939
Affects
org.freemarker:freemarker-gae
| Versions
[2.2.0,2.3.35)
M
Relative Path Traversal
CVE-2026-84939
Affects
org.freemarker:freemarker
| Versions
[2.2.0,2.3.35)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-50506
Affects
microsoft.aspnetcore.odata
| Versions
[,9.5.0)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-50506
Affects
microsoft.aspnet.odata
| Versions
[,7.8.0)
M
Cross-site Scripting (XSS)
CVE-2026-32773
Affects
org.apache.spark:spark-core_2.12
| Versions
[,3.5.8)
H
Directory Traversal
CVE-2026-85396
Affects
rubyzip
| Versions
<3.4.0
C
Incomplete List of Disallowed Inputs
CVE-2026-84218
Affects
org.jolokia:jolokia-service-jsr160
| Versions
[,2.6.2)
H
Timing Attack
CVE-2026-84308
Affects
phpseclib/phpseclib
| Versions
<3.0.57
>=4.0.0, <4.0.1
C
Improper Handling of Alternate Encoding
CVE-2026-19611
Affects
org.wildfly.security:wildfly-elytron-password-impl
| Versions
[0,]
C
Malicious Package
Affects
websetup
| Versions
[0.1.0]
C
Malicious Package
Affects
bq-sdist-probe-vrp
| Versions
[0.0.1]
C
Malicious Package
Affects
bq-build-probe-vrp-2026
| Versions
[0.2.0]
C
Malicious Package
Affects
etoro-auth
| Versions
=999.0.0
C
Malicious Package
Affects
etoro-billing
| Versions
=999.0.0
C
Malicious Package
Affects
etoro-aggregator
| Versions
=999.0.0
C
Malicious Package
Affects
etoro-builders
| Versions
=999.0.0
C
Malicious Package
Affects
etoro-analytics
| Versions
=999.0.0
C
Malicious Package
Affects
etoro-api
| Versions
=999.0.0
C
Malicious Package
Affects
etoro-charts
| Versions
=999.0.0
C
Malicious Package
Affects
etoro-client
| Versions
=999.0.0
C
Malicious Package
Affects
etoro-cashout
| Versions
=999.0.0