Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Use of Less Trusted Source
CVE-2026-114437
Affects
github.com/go-chi/chi/middleware
| Versions
>=0.0.0
M
Use of Less Trusted Source
CVE-2026-114437
Affects
github.com/go-chi/chi/v5/middleware
| Versions
<5.4.0
C
Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-114125
Affects
storybook
| Versions
>=8.0.0 <8.6.19
>=9.0.0 <9.1.21
>=10.0.0 <10.6.2
>=11.0.0-alpha.0 <11.0.0-alpha.6
C
Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-114125
Affects
@storybook/core
| Versions
>=8.2.0-beta.1 <8.6.19
C
Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-114125
Affects
@storybook/core-server
| Versions
>=8.0.0 <8.6.19
C
Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-114125
Affects
@storybook/experimental-addon-test
| Versions
<8.6.19
C
Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-114125
Affects
@storybook/addon-vitest
| Versions
>=9.0.0 <9.1.21
>=10.0.0 <10.6.2
>=11.0.0-alpha.0 <11.0.0-alpha.6
C
Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-114125
Affects
@storybook/addon-mcp
| Versions
>=10.6.0 <10.6.2
>=11.0.0-alpha.0 <11.0.0-alpha.6
M
Improper Validation of Array Index
CVE-2026-115722
Affects
rply
| Versions
[0,]
H
Origin Validation Error
CVE-2026-109461
Affects
@azure/msal-node
| Versions
>=5.0.0-beta.0 <7.1.0
L
Improper Locking
CVE-2026-112907
Affects
filelock
| Versions
[3.22.0,4.2.1)
M
Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-112913
Affects
filelock
| Versions
[3.20.4,4.2.1)
L
Directory Traversal
Affects
setuptools
| Versions
[38.2.3,84.1.0)
L
Cross-site Scripting (XSS)
CVE-2026-115897
Affects
serialize-javascript
| Versions
<7.1.3
C
Malicious Package
Affects
overarch-windows-x64-yr
| Versions
=2.0.0
=1.4.0
=1.5.0
C
Malicious Package
Affects
@liauto/win32-x64
| Versions
=0.1.2-b2
C
Malicious Package
Affects
orqiva-runtime-win32-x64
| Versions
=0.1.0
C
Malicious Package
Affects
@k18k/entrypoint-sdk-darwin-x64
| Versions
=0.2.0
C
Malicious Package
Affects
@k18k/entrypoint-sdk-linux-x64
| Versions
=0.2.0
C
Malicious Package
Affects
@k18k/entrypoint-sdk-darwin-arm64
| Versions
=0.2.0
C
Malicious Package
Affects
brambletask
| Versions
[0.1.0]
C
Malicious Package
Affects
jobwharf
| Versions
[0.1.0]
C
Malicious Package
Affects
slatejob
| Versions
[0.1.0]
C
Malicious Package
Affects
thistlerun
| Versions
[0.1.0]
C
Malicious Package
Affects
kestreljob
| Versions
[0.1.0]
C
Malicious Package
Affects
taskquay
| Versions
[0.1.0]
C
Malicious Package
Affects
thornqueue
| Versions
[0.1.0]
C
Malicious Package
Affects
runpier
| Versions
[0.1.0]
C
Malicious Package
Affects
ferretqueue
| Versions
[0.1.0]
C
Malicious Package
Affects
loadferry
| Versions
[0.1.0]