Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Server-side Request Forgery (SSRF)
Affects
@n8n/n8n-nodes-langchain
| Versions
<2.31.3
>=2.32.0 <2.32.1
L
Improper Validation of Certificate with Host Mismatch
CVE-2026-40992
Affects
org.springframework.boot:spring-boot-mail
| Versions
[3.4.0,3.5.15)
[4.0.0-M1,4.0.7)
M
XML External Entity (XXE) Injection
CVE-2026-40991
Affects
org.springframework.restdocs:spring-restdocs-restassured
| Versions
[,3.0.6)
[4.0.0-M1,]
M
XML External Entity (XXE) Injection
CVE-2026-40991
Affects
org.springframework.restdocs:spring-restdocs-webtestclient
| Versions
[,3.0.6)
[4.0.0-M1,4.0.1)
H
Directory Traversal
CVE-2026-40987
Affects
org.springframework.integration:spring-integration-ftp
| Versions
[,6.5.9)
[7.0.0-M1, 7.0.5)
[7.1.0-M1, 7.1.0)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-40984
Affects
io.micrometer:micrometer-jetty11
| Versions
[1.9.0,1.15.12)
[1.16.0-M1,1.16.6)
M
Prototype Pollution
Affects
n8n-core
| Versions
<1.122.38
>=2.0.0-rc.0 <2.31.3
>=2.32.0 <2.32.1
M
Incorrect Authorization
CVE-2026-65594
Affects
@n8n/n8n-nodes-langchain
| Versions
>=2.27.0 <2.29.7
>=2.30.0 <2.30.1
M
Incorrect Authorization
CVE-2026-65594
Affects
@n8n/client-oauth2
| Versions
<1.11.2
>=1.12.0 <1.12.1
H
Directory Traversal
Affects
n8n-nodes-base
| Versions
<1.121.42
>=2.0.0-rc.0 <2.31.3
>=2.32.0 <2.32.1
H
Server-side Request Forgery (SSRF)
Affects
n8n-nodes-base
| Versions
<1.121.42
>=2.0.0-rc.0 <2.31.3
>=2.32.0 <2.32.1
H
Command Injection
Affects
n8n-nodes-base
| Versions
<1.121.42
>=2.0.0-rc.0 <2.31.3
>=2.32.0 <2.32.1
H
Directory Traversal
Affects
@n8n/computer-use
| Versions
<0.15.1
H
Authorization Bypass Through User-Controlled Key
CVE-2026-65016
Affects
n8n
| Versions
<1.123.64
>=2.0.0-rc.0 <2.29.8
>=2.30.0 <2.30.1
H
SQL Injection
Affects
n8n-nodes-base
| Versions
<1.121.42
>=2.0.0-rc.0 <2.31.3
>=2.32.0 <2.32.1
H
SQL Injection
Affects
n8n-nodes-base
| Versions
<1.121.42
>=2.0.0-rc.0 <2.31.3
>=2.32.0 <2.32.1
M
Incorrect Authorization
Affects
n8n
| Versions
<1.123.67
>=2.0.0-rc.0 <2.31.5
>=2.32.0 <2.32.1
H
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVE-2026-65591
Affects
n8n
| Versions
<1.123.64
>=2.0.0-rc.0 <2.29.8
>=2.30.0 <2.30.1
H
Incorrect Authorization
CVE-2026-65595
Affects
n8n
| Versions
<2.29.8
>=2.30.0 <2.30.1
H
Server-side Request Forgery (SSRF)
CVE-2026-65593
Affects
n8n
| Versions
<1.123.64
>=2.0.0-rc.0 <2.29.8
>=2.30.0 <2.30.1
H
Command Injection
CVE-2026-14881
Affects
@mongodb-js/connection-form
| Versions
<1.84.0
C
Malicious Package
Affects
mrmustard
| Versions
[0.7.4]
C
Malicious Package
Affects
@kalipto/local
| Versions
*
C
Malicious Package
Affects
npx-whoami-demo
| Versions
*
C
Malicious Package
Affects
fluterjs
| Versions
*
C
Malicious Package
Affects
kalipto-runtime
| Versions
*
C
Malicious Package
Affects
jextic-eclib
| Versions
*
C
Malicious Package
Affects
@ci-lifecycle-test/postinstall-ping
| Versions
*
C
Malicious Package
Affects
ap3-components-ui
| Versions
*
C
Malicious Package
Affects
permcserver
| Versions
*