Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
L
Server-side Request Forgery (SSRF)
CVE-2026-12210
Affects
utcp-gql
| Versions
[,1.1.1)
L
Server-side Request Forgery (SSRF)
CVE-2026-12210
Affects
utcp-websocket
| Versions
[,1.1.1)
H
Insertion of Sensitive Information into Log File
Affects
quart
| Versions
[0.23.0,0.23.1)
H
Insufficient Session Expiration
Affects
pyload-ng
| Versions
[0.5.0b3.dev98,]
H
Timing Attack
Affects
pyload-ng
| Versions
[0.5.0b3.dev13,]
H
Insufficient Session Expiration
Affects
pyload-ng
| Versions
[0,]
M
Server-side Request Forgery (SSRF)
Affects
pyload-ng
| Versions
[0,]
H
Allocation of Resources Without Limits or Throttling
Affects
plone.app.contenttypes
| Versions
[,3.0.12)
[4.0.0,4.0.10)
[5.0.0,5.0.1)
H
Server-side Request Forgery (SSRF)
Affects
utcp-http
| Versions
[,1.1.4)
H
Server-side Request Forgery (SSRF)
Affects
utcp-http
| Versions
[,1.1.4)
C
Permissive Cross-domain Policy with Untrusted Domains
Affects
vibe-trading-ai
| Versions
[0.1.0,0.1.7)
H
Files or Directories Accessible to External Parties
Affects
vibe-trading-ai
| Versions
[0.1.0,0.1.7)
H
Server-side Request Forgery (SSRF)
Affects
lmdeploy
| Versions
[0.12.3,0.15.0)
C
Server-side Request Forgery (SSRF)
Affects
vibe-trading-ai
| Versions
[0.1.0,0.1.7)
M
Incorrect Calculation
Affects
vyper
| Versions
[,0.2.6)
M
Always-Incorrect Control Flow Implementation
Affects
vyper
| Versions
[0.1.0b10,0.2.3)
H
Directory Traversal
Affects
langchain-nvidia-ai-endpoints
| Versions
[,1.4.2)
M
External Control of File Name or Path
Affects
graphifyy
| Versions
[0.7.2,0.9.70)
H
Server-side Request Forgery (SSRF)
Affects
langflow
| Versions
[,1.10.3)
H
Server-side Request Forgery (SSRF)
Affects
langflow-base
| Versions
[,0.10.3)
H
Server-side Request Forgery (SSRF)
Affects
lfx
| Versions
[,1.10.3)
H
Server-side Request Forgery (SSRF)
Affects
lfx-docling
| Versions
[,0.1.2)
C
Binding to an Unrestricted IP Address
CVE-2026-82456
Affects
argocd-mcp
| Versions
<0.9.0
M
Symlink Attack
CVE-2026-16077
Affects
astrbot
| Versions
[0,]
H
Missing Authorization
CVE-2026-75109
Affects
determined
| Versions
[0,]
H
Authorization Bypass Through User-Controlled Key
CVE-2026-51879
Affects
deeptutor
| Versions
[,1.4.1)
H
Directory Traversal
CVE-2026-51880
Affects
deeptutor
| Versions
[,1.4.1)
M
Improper Authorization
CVE-2026-51876
Affects
deeptutor
| Versions
[,1.4.1)
C
Arbitrary Code Injection
CVE-2026-51870
Affects
deeptutor
| Versions
[,1.4.1)
C
Arbitrary Code Injection
CVE-2026-51881
Affects
deeptutor
| Versions
[,1.4.1)