Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- C
Arbitrary Command InjectionCVE-2026-41501
Affects electerm | Versions <3.3.8
Has fix
npmPublished 28 Apr 2026
- M
Cross-site Request Forgery (CSRF)CVE-2026-42190
Affects rwsdk | Versions >=1.0.0-beta.50 <1.2.3
Has fix
npmPublished 28 Apr 2026
- M
Origin Validation ErrorCVE-2026-40594
Affects pyload-ng | Versions [,0.5.0b3.dev98)
Has fix
pipPublished 28 Apr 2026
Affects @saltcorn/server | Versions <1.4.4>=1.5.0-beta.0 <1.5.2>=1.6.0-alpha.0 <1.6.0-beta.1
Has fix
npmPublished 28 Apr 2026
Affects @saltcorn/data | Versions <1.4.4>=1.5.0-beta.0 <1.5.2>=1.6.0-alpha.0 <1.6.0-beta.1
Has fix
npmPublished 28 Apr 2026
- M
Insertion of Sensitive Information into Log FileCVE-2026-42282
Affects n8n-mcp | Versions <2.47.13
Has fix
npmPublished 28 Apr 2026
- H
Sensitive Cookie Without "HttpOnly" FlagCVE-2026-42239
Affects @budibase/backend-core | Versions <3.35.10
Has fix
npmPublished 28 Apr 2026
- M
Insertion of Sensitive Information into Log FileCVE-2026-41495
Affects n8n-mcp | Versions <2.47.11
Has fix
npmPublished 28 Apr 2026
- M
Server-side Request Forgery (SSRF)CVE-2026-6606
Affects agentscope | Versions [0,]
Has fix
pipPublished 28 Apr 2026
- M
Server-side Request Forgery (SSRF)CVE-2026-6605
Affects agentscope | Versions [0,]
Has fix
pipPublished 28 Apr 2026
- M
Arbitrary Code InjectionCVE-2026-6603
Affects agentscope | Versions [0,]
Has fix
pipPublished 28 Apr 2026
- M
Server-side Request Forgery (SSRF)CVE-2026-6604
Affects agentscope | Versions [0,]
Has fix
pipPublished 28 Apr 2026
- H
Arbitrary Code InjectionCVE-2026-39846
Affects github.com/siyuan-note/siyuan/kernel/sql | Versions <3.6.4-dev2
Has fix
GoPublished 28 Apr 2026
Affects meridian.mapping | Versions [,2.1.1)
Has fix
NuGetPublished 28 Apr 2026
Affects meridian.mediator | Versions [,2.1.1)
Has fix
NuGetPublished 28 Apr 2026
- M
Incorrect AuthorizationCVE-2026-35596
Affects github.com/go-vikunja/vikunja/pkg/models | Versions <2.3.0
Has fix
GoPublished 28 Apr 2026
- M
Cross-site Scripting (XSS)CVE-2026-35600
Affects github.com/go-vikunja/vikunja/pkg/notifications | Versions <2.3.0
Has fix
GoPublished 28 Apr 2026
- M
Cross-site Scripting (XSS)CVE-2026-35600
Affects github.com/go-vikunja/vikunja/pkg/modules/migration/handler | Versions <2.3.0
Has fix
GoPublished 28 Apr 2026
- M
Cross-site Scripting (XSS)CVE-2026-35600
Affects github.com/go-vikunja/vikunja/pkg/models | Versions <2.3.0
Has fix
GoPublished 28 Apr 2026
- H
Inefficient Algorithmic ComplexityCVE-2026-35599
Affects github.com/go-vikunja/vikunja/pkg/models | Versions <2.3.0
Has fix
GoPublished 28 Apr 2026
- M
Incorrect AuthorizationCVE-2026-40103
Affects github.com/go-vikunja/vikunja/pkg/models | Versions <2.3.0
Has fix
GoPublished 28 Apr 2026
- M
CRLF InjectionCVE-2026-35601
Affects github.com/go-vikunja/vikunja/pkg/caldav | Versions <2.3.0
Has fix
GoPublished 28 Apr 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-40980
Affects org.springframework.ai:spring-ai-pdf-document-reader | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 28 Apr 2026
- M
Insufficiently Protected CredentialsCVE-2026-40979
Affects org.springframework.ai:spring-ai-autoconfigure-model-transformers | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 28 Apr 2026
- H
SQL InjectionCVE-2026-40978
Affects org.springframework.ai:spring-ai-azure-cosmos-db-store | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 28 Apr 2026
- H
Improper Certificate ValidationCVE-2026-4740
Affects github.com/open-cluster-management-io/ocm/pkg/registration/register | Versions <1.2.1
Has fix
GoPublished 28 Apr 2026
- H
Arbitrary Code InjectionCVE-2026-6357
Affects pip | Versions [22.1b1, 26.1)
Has fix
pipPublished 28 Apr 2026
Affects github.com/platform-mesh/kubernetes-graphql-gateway/gateway/gateway/endpoint | Versions <1.2.9
Has fix
GoPublished 28 Apr 2026
Affects github.com/cloudnativelabs/kube-router/v2/pkg/controllers/routing | Versions >=2.7.0 <2.9.0
Has fix
GoPublished 28 Apr 2026