Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • H
Open Redirect		github.com/zitadel/zitadel/internal/notification/handlers>=2.0.0 <2.71.18>=3.0.0-rc.1 <3.4.3>=4.0.0-rc.1 <4.6.0Go30 Oct 2025
  • H
Open Redirect		github.com/zitadel/zitadel/internal/api/http>=2.0.0 <2.71.18>=3.0.0-rc.1 <3.4.3>=4.0.0-rc.1 <4.6.0Go30 Oct 2025
  • H
Open Redirect		github.com/zitadel/zitadel/internal/api/http/middleware>=2.0.0 <2.71.18>=3.0.0-rc.1 <3.4.3>=4.0.0-rc.1 <4.6.0Go30 Oct 2025
  • H
Open Redirect		github.com/zitadel/zitadel/internal/api/grpc/server/middleware>=2.0.0 <2.71.18>=3.0.0-rc.1 <3.4.3>=4.0.0-rc.1 <4.6.0Go30 Oct 2025
  • H
Open Redirect		github.com/zitadel/zitadel/internal/api/grpc/server/connect_middleware>=2.0.0 <2.71.18>=3.0.0-rc.1 <3.4.3>=4.0.0-rc.1 <4.6.0Go30 Oct 2025
  • H
Open Redirect		github.com/zitadel/zitadel/internal/api/authz>=2.0.0 <2.71.18>=3.0.0-rc.1 <3.4.3>=4.0.0-rc.1 <4.6.0Go30 Oct 2025
  • H
Use of Single-factor Authentication		github.com/zitadel/zitadel/internal/query>=2.53.6 <2.71.8>=3.0.0-rc.1 <3.4.3>=4.0.0-rc.1 <4.6.0Go30 Oct 2025
  • H
Use of Single-factor Authentication		github.com/zitadel/zitadel/internal/domain>=2.53.6 <2.71.8>=3.0.0-rc.1 <3.4.3>=4.0.0-rc.1 <4.6.0Go30 Oct 2025
  • H
Use of Single-factor Authentication		github.com/zitadel/zitadel/internal/authz/repository/eventsourcing/eventstore>=2.53.6 <2.71.8>=3.0.0-rc.1 <3.4.3>=4.0.0-rc.1 <4.6.0Go30 Oct 2025
  • H
Allocation of Resources Without Limits or Throttling		github.com/hashicorp/consul/agent<1.22.0Go30 Oct 2025
  • H
Allocation of Resources Without Limits or Throttling		github.com/hashicorp/consul/agent<1.22.0Go30 Oct 2025
  • H
Brute Force		github.com/zitadel/zitadel/internal/config/systemdefaults<2.71.18>=3.0.0-rc.1 <3.4.3>=4.0.0-rc.1 <4.6.0Go30 Oct 2025
  • H
Brute Force		github.com/zitadel/zitadel/internal/command<2.71.18>=3.0.0-rc.1 <3.4.3>=4.0.0-rc.1 <4.6.0Go30 Oct 2025
  • M
Use After Free		PixarAnimationStudios/OpenUSD[,25.11)Unmanaged (C/C++)30 Oct 2025
  • H
Cross-site Scripting (XSS)		ckan[,2.10.9)[2.11.0,2.11.4)pip30 Oct 2025
  • H
Session Fixation		ckan[2.10.0,2.10.9)[2.11.0,2.11.4)pip30 Oct 2025
  • C
Malicious Package		esm-package*npm30 Oct 2025
  • C
Malicious Package		near-abi-client-js*npm30 Oct 2025
  • C
Malicious Package		faltest*npm30 Oct 2025
  • C
Malicious Package		xo-styles*npm30 Oct 2025
  • C
Malicious Package		jsx-a11y*npm30 Oct 2025
  • C
Malicious Package		ing-web-es*npm30 Oct 2025
  • C
Malicious Package		elemefe*npm30 Oct 2025
  • C
Malicious Package		airbnb-bev*npm30 Oct 2025
  • C
Malicious Package		fq-ui*npm30 Oct 2025
  • C
Malicious Package		chai-friendly*npm30 Oct 2025
  • C
Malicious Package		pmcrypto*npm30 Oct 2025
  • C
Malicious Package		twilio-ts*npm30 Oct 2025
  • C
Malicious Package		inline-react-svg*npm30 Oct 2025
  • C
Malicious Package		mourner*npm30 Oct 2025