Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Denial of Service (DoS)
CVE-2026-34650
Affects
magento/community-edition
| Versions
<2.4.6-p15
>=2.4.7-beta1, <2.4.7-p10
>=2.4.8-beta1, <2.4.8-p5
>=2.4.9-alpha1, <2.4.9
H
Denial of Service (DoS)
CVE-2026-34648
Affects
magento/community-edition
| Versions
<2.4.6-p15
>=2.4.7-beta1, <2.4.7-p10
>=2.4.8-beta1, <2.4.8-p5
>=2.4.9-alpha1, <2.4.9
M
Improper Authorization
CVE-2026-34656
Affects
magento/community-edition
| Versions
<2.4.6-p15
>=2.4.7-beta1, <2.4.7-p10
>=2.4.8-beta1, <2.4.8-p5
>=2.4.9-alpha1, <2.4.9
H
Cross-site Scripting (XSS)
CVE-2026-34686
Affects
magento/community-edition
| Versions
<2.4.6-p15
>=2.4.7-beta1, <2.4.7-p10
>=2.4.8-beta1, <2.4.8-p5
>=2.4.9-alpha1, <2.4.9
M
Cross-site Scripting (XSS)
CVE-2026-34658
Affects
magento/community-edition
| Versions
<2.4.6-p15
>=2.4.7-beta1, <2.4.7-p10
>=2.4.8-beta1, <2.4.8-p5
>=2.4.9-alpha1, <2.4.9
H
Dependency on Vulnerable Third-Party Component
CVE-2026-34652
Affects
magento/community-edition
| Versions
<2.4.6-p15
>=2.4.7-beta1, <2.4.7-p10
>=2.4.8-beta1, <2.4.8-p5
>=2.4.9-alpha1, <2.4.9
M
Out-of-bounds Read
CVE-2026-34685
Affects
magento/community-edition
| Versions
<2.4.6-p15
>=2.4.7-beta1, <2.4.7-p10
>=2.4.8-beta1, <2.4.8-p5
>=2.4.9-alpha1, <2.4.9
L
Open Redirect
CVE-2026-21295
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
M
Incorrect Authorization
CVE-2026-21296
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
L
Incorrect Authorization
CVE-2026-21359
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
H
Incorrect Authorization
CVE-2026-21309
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
M
Improper Input Validation
CVE-2026-21310
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
H
Cross-site Scripting (XSS)
CVE-2026-21361
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
M
Directory Traversal
CVE-2026-21360
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
M
Server-side Request Forgery (SSRF)
CVE-2026-21294
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
H
Cross-site Scripting (XSS)
CVE-2026-21311
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
M
Cross-site Scripting (XSS)
CVE-2026-21291
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
M
Improper Input Validation
CVE-2026-21282
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
M
Server-side Request Forgery (SSRF)
CVE-2026-21293
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
M
Cross-site Scripting (XSS)
CVE-2026-21292
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
H
Incorrect Authorization
CVE-2026-21289
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
M
Incorrect Authorization
CVE-2026-21285
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
H
Cross-site Scripting (XSS)
CVE-2026-21290
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
H
Cross-site Scripting (XSS)
CVE-2026-21284
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
M
Incorrect Authorization
CVE-2026-21286
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
M
Incorrect Authorization
CVE-2026-21297
Affects
magento/community-edition
| Versions
<2.4.6-p14
>=2.4.7-beta1, <2.4.7-p9
>=2.4.8-beta1, <2.4.8-p4
>=2.4.9-alpha1, <2.4.9-beta1
M
Missing Authorization
CVE-2024-39418
Affects
magento/community-edition
| Versions
<2.4.4-p10
>=2.4.5, <2.4.5-p9
>=2.4.6, <2.4.6-p7
>=2.4.7-beta1, <2.4.7-p2
M
Missing Authorization
CVE-2024-39405
Affects
magento/community-edition
| Versions
<2.4.4-p10
>=2.4.5, <2.4.5-p9
>=2.4.6, <2.4.6-p7
>=2.4.7-beta1, <2.4.7-p2
C
Command Injection
CVE-2024-39402
Affects
magento/community-edition
| Versions
<2.4.4-p10
>=2.4.5, <2.4.5-p9
>=2.4.6, <2.4.6-p7
>=2.4.7-beta1, <2.4.7-p2
M
Premature Release of Resource During Expected Lifetime
CVE-2024-39404
Affects
magento/community-edition
| Versions
<2.4.4-p10
>=2.4.5, <2.4.5-p9
>=2.4.6, <2.4.6-p7
>=2.4.7-beta1, <2.4.7-p2