Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Insufficiently Protected CredentialsCVE-2026-40979
Affects org.springframework.ai:spring-ai-autoconfigure-model-transformers | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 28 Apr 2026
  • H
SQL InjectionCVE-2026-40978
Affects org.springframework.ai:spring-ai-azure-cosmos-db-store | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 28 Apr 2026
  • H
Improper Certificate ValidationCVE-2026-4740
Affects github.com/open-cluster-management-io/ocm/pkg/registration/register | Versions <1.2.1
Has fix
GoPublished 28 Apr 2026
  • H
Arbitrary Code InjectionCVE-2026-6357
Affects pip | Versions [22.1b1, 26.1)
Has fix
pipPublished 28 Apr 2026
  • H
Allocation of Resources Without Limits or Throttling
Affects github.com/platform-mesh/kubernetes-graphql-gateway/gateway/gateway/endpoint | Versions <1.2.9
Has fix
GoPublished 28 Apr 2026
  • M
Insertion of Sensitive Information into Log File
Affects github.com/cloudnativelabs/kube-router/v2/pkg/controllers/routing | Versions >=2.7.0 <2.9.0
Has fix
GoPublished 28 Apr 2026
  • H
Uncaught Exception
Affects github.com/aws/aws-sdk-go-v2/service/transcribestreaming | Versions <1.34.5
Has fix
GoPublished 28 Apr 2026
  • H
Uncaught Exception
Affects github.com/aws/aws-sdk-go-v2/service/sagemakerruntime | Versions <1.39.6
Has fix
GoPublished 28 Apr 2026
  • H
Uncaught Exception
Affects github.com/aws/aws-sdk-go-v2/service/s3 | Versions <1.97.3
Has fix
GoPublished 28 Apr 2026
  • H
Uncaught Exception
Affects github.com/aws/aws-sdk-go-v2/service/lexruntimev2 | Versions <1.35.15
Has fix
GoPublished 28 Apr 2026
  • H
Uncaught Exception
Affects github.com/aws/aws-sdk-go-v2/service/lambda | Versions <1.88.5
Has fix
GoPublished 28 Apr 2026
  • H
Uncaught Exception
Affects github.com/aws/aws-sdk-go-v2/service/kinesis | Versions <1.43.5
Has fix
GoPublished 28 Apr 2026
  • H
Uncaught Exception
Affects github.com/aws/aws-sdk-go-v2/service/iotsitewise | Versions <1.52.19
Has fix
GoPublished 28 Apr 2026
  • H
Uncaught Exception
Affects github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs | Versions <1.65.0
Has fix
GoPublished 28 Apr 2026
  • H
Uncaught Exception
Affects github.com/aws/aws-sdk-go-v2/service/bedrockruntime | Versions <1.50.4
Has fix
GoPublished 28 Apr 2026
  • H
Uncaught Exception
Affects github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime | Versions <1.51.8
Has fix
GoPublished 28 Apr 2026
  • H
Uncaught Exception
Affects github.com/aws/aws-sdk-go-v2/service/bedrockagentcore | Versions <1.15.2
Has fix
GoPublished 28 Apr 2026
  • H
Uncaught Exception
Affects github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream | Versions <1.7.8
Has fix
GoPublished 28 Apr 2026
  • H
Arbitrary Argument InjectionCVE-2026-40938
Affects github.com/tektoncd/pipeline/pkg/resolution/resolver/git | Versions <1.11.1
Has fix
GoPublished 28 Apr 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-40161
Affects github.com/tektoncd/pipeline/pkg/resolution/resolver/git | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026
  • H
Arbitrary Code InjectionCVE-2026-41246
Affects github.com/projectcontour/contour/internal/envoy/v3 | Versions >=1.19.0 <1.31.6>=1.32.0 <1.32.5>=1.33.0 <1.33.4
Has fix
GoPublished 28 Apr 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-39087
Affects github.com/binwiederhier/ntfy/v2/server | Versions <2.21.0
Has fix
GoPublished 28 Apr 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-39087
Affects github.com/binwiederhier/ntfy/server | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026
  • H
Directory TraversalCVE-2026-32885
Affects github.com/ddev/ddev/pkg/archive | Versions <1.25.2
Has fix
GoPublished 28 Apr 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-41135
Affects github.com/free5gc/pcf/internal/sbi/processor | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026
  • M
Incorrect AuthorizationCVE-2026-41174
Affects github.com/traefik/traefik/v3/pkg/provider/kubernetes/crd | Versions >=3.0.0-beta1 <3.6.14>=3.7.0-ea.1 <3.7.0-rc.2
Has fix
GoPublished 28 Apr 2026
  • M
Incorrect AuthorizationCVE-2026-41174
Affects github.com/traefik/traefik/v2/pkg/provider/kubernetes/crd | Versions <2.11.43
Has fix
GoPublished 28 Apr 2026
  • M
Incorrect AuthorizationCVE-2026-41174
Affects github.com/traefik/traefik/pkg/provider/kubernetes/crd | Versions <2.11.43>=3.0.0-beta1 <3.6.14>=3.7.0-ea.1 <3.7.0-rc.2
Has fix
GoPublished 28 Apr 2026
  • M
Expected Behavior ViolationCVE-2026-41136
Affects github.com/free5gc/amf/internal/sbi/processor | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026
  • H
Insufficient Verification of Data AuthenticityCVE-2026-35051
Affects github.com/traefik/traefik/v3/pkg/config/dynamic | Versions >=3.0.0-beta1 <3.6.14>=3.7.0-ea.1 <3.7.0-rc.2
Has fix
GoPublished 28 Apr 2026