Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • L
Uncontrolled RecursionCVE-2026-39396
Affects github.com/openbao/openbao/helper/pluginutil | Versions <2.5.3
Has fix
GoPublished 28 Apr 2026
  • L
Uncontrolled RecursionCVE-2026-39396
Affects github.com/openbao/openbao/command/server | Versions <2.5.3
Has fix
GoPublished 28 Apr 2026
  • L
Improper Certificate ValidationCVE-2026-39388
Affects github.com/openbao/openbao/builtin/credential/cert | Versions <2.5.3
Has fix
GoPublished 28 Apr 2026
  • L
Improper Restriction of Security Token AssignmentCVE-2026-40264
Affects github.com/openbao/openbao/vault | Versions <2.5.3
Has fix
GoPublished 28 Apr 2026
  • H
Access Control BypassCVE-2026-33031
Affects github.com/0xjacky/nginx-ui/internal/user | Versions <2.3.4
Has fix
GoPublished 28 Apr 2026
  • H
Access Control BypassCVE-2026-33031
Affects github.com/0xjacky/nginx-ui/api/user | Versions <2.3.4
Has fix
GoPublished 28 Apr 2026
  • M
Missing Origin Validation in WebSocketsCVE-2026-34403
Affects github.com/0xjacky/nginx-ui/mcp | Versions <2.3.4
Has fix
GoPublished 28 Apr 2026
  • M
Missing Origin Validation in WebSocketsCVE-2026-34403
Affects github.com/0xjacky/nginx-ui/internal/middleware | Versions <2.3.4
Has fix
GoPublished 28 Apr 2026
  • M
Missing Origin Validation in WebSocketsCVE-2026-34403
Affects github.com/0xjacky/nginx-ui/api | Versions <2.3.4
Has fix
GoPublished 28 Apr 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-40481
Affects github.com/monetr/monetr/server/controller | Versions <1.12.4
Has fix
GoPublished 28 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-40302
Affects github.com/openziti/zrok/v2/endpoints/publicproxy | Versions <2.0.1
Has fix
GoPublished 28 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-40302
Affects github.com/openziti/zrok/v2/endpoints/dynamicproxy | Versions <2.0.1
Has fix
GoPublished 28 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-40302
Affects github.com/openziti/zrok/endpoints/proxyui | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-40302
Affects github.com/openziti/zrok/v2/endpoints/proxyui | Versions <2.0.1
Has fix
GoPublished 28 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-40302
Affects github.com/openziti/zrok/endpoints/publicproxy | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-40302
Affects github.com/openziti/zrok/endpoints/dynamicproxy | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026
  • H
Memory Allocation with Excessive Size ValueCVE-2026-40303
Affects github.com/openziti/zrok/v2/endpoints/publicproxy | Versions <2.0.1
Has fix
GoPublished 28 Apr 2026
  • H
Memory Allocation with Excessive Size ValueCVE-2026-40303
Affects github.com/openziti/zrok/v2/endpoints/dynamicproxy | Versions <2.0.1
Has fix
GoPublished 28 Apr 2026
  • H
Memory Allocation with Excessive Size ValueCVE-2026-40303
Affects github.com/openziti/zrok/endpoints/dynamicproxy | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026
  • H
Memory Allocation with Excessive Size ValueCVE-2026-40303
Affects github.com/openziti/zrok/endpoints/publicproxy | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026
  • H
Incorrect Ownership AssignmentCVE-2026-40196
Affects github.com/sysadminsmedia/homebox/backend/app/api | Versions <0.25.0
Has fix
GoPublished 28 Apr 2026
  • H
Incorrect Ownership AssignmentCVE-2026-40196
Affects github.com/sysadminsmedia/homebox/backend/internal/core/services | Versions <0.25.0
Has fix
GoPublished 28 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-40922
Affects github.com/siyuan-note/siyuan/kernel/bazaar | Versions >=3.6.1 <3.6.4
Has fix
GoPublished 28 Apr 2026
  • H
Improper AuthorizationCVE-2026-40248
Affects github.com/free5gc/udr/internal/sbi/processor | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026
  • H
Improper AuthorizationCVE-2026-40247
Affects github.com/free5gc/udr/internal/sbi/processor | Versions >=0.0.0
Has fix
GoPublished 28 Apr 2026
  • H
Use of Externally-Controlled Format StringCVE-2026-3008
Affects notepad-plus-plus/notepad-plus-plus | Versions [,8.9.4)
Has fix
Unmanaged (C/C++)Published 27 Apr 2026
  • M
Improper Resource Shutdown or ReleaseCVE-2026-34317
Affects mysql/mysql-shell | Versions [8.0.0,8.0.46)[8.4.0,8.4.9)[9.0.0,]
Has fix
Unmanaged (C/C++)Published 27 Apr 2026
  • M
Information ExposureCVE-2026-34319
Affects mysql/mysql-shell | Versions [8.0.0,8.0.46)[8.4.0,8.4.9)[9.0.0,]
Has fix
Unmanaged (C/C++)Published 27 Apr 2026
  • M
Information ExposureCVE-2026-34318
Affects mysql/mysql-shell | Versions [8.0.0,8.0.46)[8.4.0,8.4.9)[9.0.0,]
Has fix
Unmanaged (C/C++)Published 27 Apr 2026
  • H
Use of Weak HashCVE-2026-40164
Affects stedolan/jq | Versions [,1.8.2-rc1)
Has fix
Unmanaged (C/C++)Published 27 Apr 2026