Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Directory Traversal
CVE-2026-114140
Affects
nbconvert
| Versions
[5.4.0,7.17.2)
M
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-114655
Affects
mongodb/libmongocrypt
| Versions
[,1.21.1)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-111768
Affects
@modelcontextprotocol/sdk
| Versions
>=1.3.0 <1.32.0
H
Allocation of Resources Without Limits or Throttling
CVE-2026-111768
Affects
@modelcontextprotocol/server
| Versions
>=2.0.0 <2.3.0
H
Directory Traversal
CVE-2026-115354
Affects
mistune
| Versions
[3.2.0,3.3.0)
H
Regular Expression Denial of Service (ReDoS)
CVE-2026-115349
Affects
mistune
| Versions
[3.0.0,3.3.0)
H
Inefficient Algorithmic Complexity
CVE-2026-115347
Affects
mistune
| Versions
[3.2.0,3.3.0)
M
Cross-site Scripting (XSS)
CVE-2026-115350
Affects
mistune
| Versions
[,3.3.0)
M
Arbitrary Code Injection
CVE-2026-115351
Affects
mistune
| Versions
[,3.3.0)
H
Regular Expression Denial of Service (ReDoS)
CVE-2026-115348
Affects
mistune
| Versions
[3.0.0,3.3.0)
H
Inefficient Algorithmic Complexity
CVE-2026-115352
Affects
mistune
| Versions
[,3.3.0)
H
Directory Traversal
CVE-2026-115355
Affects
mistune
| Versions
[,3.3.0)
C
Directory Traversal
CVE-2026-115353
Affects
mistune
| Versions
[,3.3.0)
H
Prototype Pollution
CVE-2026-114604
Affects
@graphql-tools/utils
| Versions
>=10.10.1 <12.0.2
M
Protection Mechanism Failure
CVE-2026-113730
Affects
ognl:ognl
| Versions
[,3.4.13)
H
Cross-site Scripting (XSS)
Affects
dompurify
| Versions
<3.4.17
L
Cross-site Scripting (XSS)
Affects
dompurify
| Versions
<3.4.17
C
Cross-site Scripting (XSS)
Affects
dompurify
| Versions
>=3.4.4 <3.4.17
C
Deserialization of Untrusted Data
Affects
next
| Versions
>=16.0.0 <16.4.1
H
Allocation of Resources Without Limits or Throttling
CVE-2026-94482
Affects
next
| Versions
>=13.0.0 <15.5.28
>=16.0.0 <16.4.1
C
Dependency on Vulnerable Third-Party Component
Affects
next
| Versions
>=10.0.0 <15.5.28
>=16.0.0 <16.4.1
C
Malicious Package
Affects
qowa
| Versions
[0.1.0]
C
Malicious Package
Affects
journey-teste-shellhello
| Versions
[0.2.0]
C
Malicious Package
Affects
@cecm-web-sdk/core
| Versions
*
C
Malicious Package
Affects
@blueskydataplatform/shared-ui
| Versions
*
C
Malicious Package
Affects
@ecg-internal/favourites-ui
| Versions
*
C
Malicious Package
Affects
@ecg-internal/adobe-dmp-js
| Versions
*
C
Malicious Package
Affects
@grabcad/preferences-client
| Versions
*
C
Malicious Package
Affects
@grabcad/grabcad-shop-shared
| Versions
*
C
Malicious Package
Affects
@ecg-internal/js-react-i18n
| Versions
*