Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Cross-site Scripting (XSS)
CVE-2026-107588
Affects
com.vaadin:vaadin-charts-flow-svg-generator
| Versions
[21.0.0,23.6.16)
[24.0.0,24.4.24)
[24.5.0,24.7.15)
[24.8.0,24.9.23)
[24.10.0,24.10.11)
[25.0.0,25.2.10)
[25.3.0,25.3.1)
H
Cross-site Scripting (XSS)
CVE-2026-107588
Affects
com.vaadin:vaadin-charts-flow
| Versions
[22.0.0,23.6.16)
[24.0.0,24.4.24)
[24.5.0,24.7.15)
[24.8.0,24.9.23)
[24.10.0,24.10.11)
[25.0.0,25.2.10)
[25.3.0,25.3.1)
H
Cross-site Scripting (XSS)
CVE-2026-107588
Affects
com.vaadin:vaadin
| Versions
[22.0.0,23.6.16)
[24.0.0,24.4.24)
[24.5.0,24.7.16)
[24.8.0,24.9.23)
[24.10.0,24.10.11)
[25.0.0,25.2.10)
[25.3.0,25.3.1)
H
Improper Locking
CVE-2026-110803
Affects
com.vaadin:vaadin-server-mpr-jakarta
| Versions
[8.18.0,8.32.2)
H
Improper Locking
CVE-2026-110803
Affects
com.vaadin:vaadin-server
| Versions
[8.16.0,8.32.2)
M
Cross-site Scripting (XSS)
CVE-2016-20102
Affects
net.bull.javamelody:javamelody-core
| Versions
[,1.60.0)
M
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-103036
Affects
@orpc/json-schema
| Versions
<1.14.9
M
HTTP Response Splitting
CVE-2026-77360
Affects
@orpc/server
| Versions
<1.14.8
H
Prototype Pollution
CVE-2026-103918
Affects
@orpc/zod
| Versions
<1.14.10
M
Improper Encoding or Escaping of Output
CVE-2026-113667
Affects
@apostrophecms/form
| Versions
<1.5.5
M
Improper Encoding or Escaping of Output
CVE-2026-113667
Affects
@apostrophecms/login-recaptcha
| Versions
<1.2.1
M
Improper Encoding or Escaping of Output
CVE-2026-113667
Affects
@apostrophecms/login-hcaptcha
| Versions
<1.3.0
M
Server-side Request Forgery (SSRF)
CVE-2026-113671
Affects
@apostrophecms/ai-helper
| Versions
>=1.0.0-beta.10 <1.0.0-beta.13
M
Allocation of Resources Without Limits or Throttling
CVE-2026-113656
Affects
@apostrophecms/form
| Versions
<1.5.5
H
Race Condition
CVE-2026-111770
Affects
@modelcontextprotocol/server
| Versions
>=2.0.0 <2.3.0
H
Server-side Request Forgery (SSRF)
CVE-2026-112308
Affects
crewai-tools
| Versions
[0,]
C
SQL Injection
CVE-2026-115324
Affects
mem0ai
| Versions
[0.1.117,1.0.8)
H
Directory Traversal
CVE-2026-79986
Affects
org.apache.camel:camel-azure-files
| Versions
[4.0.0,4.18.5)
[4.19.0,4.22.1)
H
Directory Traversal
CVE-2026-79983
Affects
org.apache.camel:camel-ftp
| Versions
[4.0.0,4.18.5)
[4.19.0,4.22.1)
H
Directory Traversal
CVE-2026-79984
Affects
org.apache.camel:camel-mina-sftp
| Versions
[4.18.0,4.18.5)
[4.19.0,4.22.1)
H
Regular Expression Denial of Service (ReDoS)
CVE-2026-115728
Affects
@hapi/content
| Versions
<6.0.3
H
Arbitrary Code Injection
CVE-2026-115895
Affects
happy-dom
| Versions
>=17.0.0 <21.0.4
M
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-115886
Affects
mlflow
| Versions
[3.12.0rc0,3.17.0)
H
Use After Free
CVE-2026-95702
Affects
gvisor.dev/gvisor/pkg/sentry/vfs
| Versions
<20260831.0
C
Improper Certificate Validation
CVE-2026-109383
Affects
org.webjars.npm:undici
| Versions
[4.0.0,6.29.1)
[7.0.0,7.30.1)
[8.0.0,8.12.2)
C
Origin Validation Error
CVE-2026-109829
Affects
org.webjars.npm:undici
| Versions
[7.0.0,7.30.1)
[8.0.0,8.12.2)
H
Improper Handling of Case Sensitivity
CVE-2026-109841
Affects
org.webjars.npm:undici
| Versions
[7.15.0,7.30.1)
[8.0.0,8.12.2)
H
Uncaught Exception
CVE-2026-87018
Affects
org.webjars.npm:undici
| Versions
[4.2.1,6.29.1)
[7.0.0,7.30.1)
[8.0.0,8.12.2)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-109932
Affects
org.webjars.npm:undici
| Versions
[5.15.0,6.29.1)
[7.0.0,7.30.1)
[8.0.0,8.12.2)
H
Uncaught Exception
CVE-2026-87029
Affects
org.webjars.npm:undici
| Versions
[7.15.0,7.30.1)
[8.0.0,8.12.2)