Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
Malicious Package
Affects
darknode-cli
| Versions
=2.46.1
=2.46.0
=2.46.2
C
Malicious Package
Affects
imgdecode
| Versions
=1.0.1
C
Malicious Package
Affects
x402-prompt-injection-scan
| Versions
=0.1.4
C
Malicious Package
Affects
opencode-skills-collection
| Versions
=4.1.1
=4.1.8
=4.1.7
=4.1.17
=4.1.14
=4.1.19
=4.1.12
=4.0.56
=4.1.0
=4.0.77
=4.1.9
=4.1.18
C
Malicious Package
Affects
agentic-awesome-skills
| Versions
=18.14.0
=18.13.0
=19.0.1
=18.10.0
=19.2.0
=19.7.0
=19.1.0
=19.3.0
=19.5.0
C
Malicious Package
Affects
@pkgship/frpc-darwin-amd64
| Versions
=0.71.1
C
Malicious Package
Affects
@liauto/darwin-x64
| Versions
=0.1.1-b3
H
Allocation of Resources Without Limits or Throttling
CVE-2026-75508
Affects
graphql-core
| Versions
[3.2.3,3.2.12)
[3.3.0a3,3.3.0rc1)
H
Inefficient Algorithmic Complexity
CVE-2026-75507
Affects
graphql-core
| Versions
[3.0.0,3.2.12)
[3.3.0a1,3.3.0rc1)
H
Missing Release of Memory after Effective Lifetime
CVE-2026-114613
Affects
msgpack
| Versions
[1.2.2,1.2.3)
C
Improper Authentication
CVE-2026-114612
Affects
litellm
| Versions
[1.91.0,1.100.4)
[1.101.0,1.101.3)
[1.102.0,1.102.2)
[1.103.0,1.103.1)
[1.104.0rc1,1.104.0rc2)
H
Uncontrolled Recursion
CVE-2026-114605
Affects
dnspython
| Versions
[,2.9.0)
M
Deserialization of Untrusted Data
CVE-2026-114608
Affects
pylint
| Versions
[,4.0.9)
H
Uncaught Exception
CVE-2026-113872
Affects
multer
| Versions
>=2.0.0 <2.5.0
C
Interpretation Conflict
CVE-2026-112712
Affects
@fastify/middie
| Versions
>=9.0.0 <9.3.6
M
Cross-site Request Forgery (CSRF)
CVE-2026-111883
Affects
locust
| Versions
[,2.47.0)
C
Access Control Bypass
CVE-2026-114139
Affects
@sentry/nextjs
| Versions
>=9.36.0 <9.47.2
>=10.0.0-alpha.0 <10.75.2
>=11.0.0-alpha.0 <11.0.0-rc.1
L
Out-of-bounds Read
CVE-2026-114122
Affects
electron
| Versions
>=45.0.0-alpha.1 <45.0.0-alpha.9
>=44.0.0-alpha.1 <44.4.3
>=43.0.0-alpha.1 <43.7.3
<42.11.6
L
Missing Authorization
CVE-2026-113797
Affects
electron
| Versions
<42.11.1
>=43.0.0-alpha.1 <43.5.1
>=44.0.0-alpha.1 <44.1.1
>=45.0.0-alpha.1 <45.0.0-alpha.4
M
Origin Validation Error
CVE-2026-114121
Affects
electron
| Versions
>=45.0.0-alpha.1 <45.0.0-alpha.5
>=44.0.0-alpha.1 <44.3.0
>=43.0.0-alpha.1 <43.7.0
<42.11.3
M
Origin Validation Error
CVE-2026-113798
Affects
electron
| Versions
<42.11.9
>=43.0.0-alpha.1 <43.7.6
>=44.0.0-alpha.1 <44.5.0
>=45.0.0-alpha.1 <45.0.0-alpha.13
L
Out-of-bounds Read
CVE-2026-114124
Affects
electron
| Versions
>=45.0.0-alpha.1 <45.0.0-alpha.9
>=44.0.0-alpha.1 <44.4.3
>=43.0.0-alpha.1 <43.7.3
<42.11.6
L
Cross-site Request Forgery (CSRF)
CVE-2026-113796
Affects
electron
| Versions
<42.11.3
>=43.0.0-alpha.1 <43.7.0
>=44.0.0-alpha.1 <44.3.0
>=45.0.0-alpha.1 <45.0.0-alpha.6
M
Origin Validation Error
CVE-2026-113800
Affects
electron
| Versions
<42.11.3
>=43.0.0-alpha.1 <43.7.0
>=44.0.0-alpha.1 <44.3.0
>=45.0.0-alpha.1 <45.0.0-alpha.5
H
Uncaught Exception
CVE-2026-111181
Affects
body-parser
| Versions
<1.20.9
>=2.0.0 <2.4.0
C
Out-of-bounds Write
Affects
pillow
| Versions
[11.1.0,13.0.0)
H
Cross-site Scripting (XSS)
CVE-2026-114128
Affects
astro
| Versions
<7.3.2
L
Cross-site Scripting (XSS)
CVE-2026-114127
Affects
astro
| Versions
>=7.1.0 <7.3.3
M
Cross-site Scripting (XSS)
CVE-2026-114133
Affects
nuxt
| Versions
>=3.13.0 <4.6.2
L
Cross-site Scripting (XSS)
CVE-2026-114130
Affects
nuxt
| Versions
>=3.0.0 <4.6.0