Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
Affects com.vaadin:vaadin-charts-flow-svg-generator | Versions [21.0.0,23.6.16)[24.0.0,24.4.24)[24.5.0,24.7.15)[24.8.0,24.9.23)[24.10.0,24.10.11)[25.0.0,25.2.10)[25.3.0,25.3.1)
Affects com.vaadin:vaadin-charts-flow | Versions [22.0.0,23.6.16)[24.0.0,24.4.24)[24.5.0,24.7.15)[24.8.0,24.9.23)[24.10.0,24.10.11)[25.0.0,25.2.10)[25.3.0,25.3.1)
Affects com.vaadin:vaadin | Versions [22.0.0,23.6.16)[24.0.0,24.4.24)[24.5.0,24.7.16)[24.8.0,24.9.23)[24.10.0,24.10.11)[25.0.0,25.2.10)[25.3.0,25.3.1)
  • H
Improper LockingCVE-2026-110803
Affects com.vaadin:vaadin-server-mpr-jakarta | Versions [8.18.0,8.32.2)
  • H
Improper LockingCVE-2026-110803
Affects com.vaadin:vaadin-server | Versions [8.16.0,8.32.2)
Affects net.bull.javamelody:javamelody-core | Versions [,1.60.0)
Affects @orpc/json-schema | Versions <1.14.9
  • M
Affects @orpc/server | Versions <1.14.8
  • H
Prototype PollutionCVE-2026-103918
Affects @orpc/zod | Versions <1.14.10
Affects @apostrophecms/form | Versions <1.5.5
Affects @apostrophecms/login-recaptcha | Versions <1.2.1
Affects @apostrophecms/login-hcaptcha | Versions <1.3.0
Affects @apostrophecms/ai-helper | Versions >=1.0.0-beta.10 <1.0.0-beta.13
Affects @apostrophecms/form | Versions <1.5.5
  • H
Race ConditionCVE-2026-111770
Affects @modelcontextprotocol/server | Versions >=2.0.0 <2.3.0
Affects crewai-tools | Versions [0,]
  • C
SQL InjectionCVE-2026-115324
Affects mem0ai | Versions [0.1.117,1.0.8)
  • H
Directory TraversalCVE-2026-79986
Affects org.apache.camel:camel-azure-files | Versions [4.0.0,4.18.5)[4.19.0,4.22.1)
  • H
Directory TraversalCVE-2026-79983
Affects org.apache.camel:camel-ftp | Versions [4.0.0,4.18.5)[4.19.0,4.22.1)
  • H
Directory TraversalCVE-2026-79984
Affects org.apache.camel:camel-mina-sftp | Versions [4.18.0,4.18.5)[4.19.0,4.22.1)
Affects @hapi/content | Versions <6.0.3
  • H
Affects happy-dom | Versions >=17.0.0 <21.0.4
Affects mlflow | Versions [3.12.0rc0,3.17.0)
  • H
Use After FreeCVE-2026-95702
Affects gvisor.dev/gvisor/pkg/sentry/vfs | Versions <20260831.0
Affects org.webjars.npm:undici | Versions [4.0.0,6.29.1)[7.0.0,7.30.1)[8.0.0,8.12.2)
  • C
Affects org.webjars.npm:undici | Versions [7.0.0,7.30.1)[8.0.0,8.12.2)
Affects org.webjars.npm:undici | Versions [7.15.0,7.30.1)[8.0.0,8.12.2)
  • H
Uncaught ExceptionCVE-2026-87018
Affects org.webjars.npm:undici | Versions [4.2.1,6.29.1)[7.0.0,7.30.1)[8.0.0,8.12.2)
Affects org.webjars.npm:undici | Versions [5.15.0,6.29.1)[7.0.0,7.30.1)[8.0.0,8.12.2)
  • H
Uncaught ExceptionCVE-2026-87029
Affects org.webjars.npm:undici | Versions [7.15.0,7.30.1)[8.0.0,8.12.2)