Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-51878
Affects deeptutor | Versions [,1.4.1)
Has fix
pipPublished 24 Oct 2026
  • H
Improper Restriction of Communication Channel to Intended EndpointsCVE-2026-18655
Affects awslabs.amazon-mq-mcp-server | Versions [,2.0.24)
Has fix
pipPublished 24 Oct 2026
  • M
Directory TraversalCVE-2026-18953
Affects awslabs.aws-transform-mcp-server | Versions [,0.1.5)
Has fix
pipPublished 24 Oct 2026
  • H
Improper Neutralization of Special Elements Used in a Template EngineCVE-2026-85654
Affects awslabs.dynamodb-mcp-server | Versions [,2.1.6)
Has fix
pipPublished 24 Oct 2026
  • H
Incomplete List of Disallowed InputsCVE-2026-85787
Affects awslabs.postgres-mcp-server | Versions [,1.1.7)
Has fix
pipPublished 24 Oct 2026
  • C
Command InjectionCVE-2026-87911
Affects awslabs.postgres-mcp-server | Versions [,1.1.7)
Has fix
pipPublished 24 Oct 2026
  • M
Unverified OwnershipCVE-2026-87913
Affects awslabs.security-agent-mcp-server | Versions [,0.2.0)
Has fix
pipPublished 24 Oct 2026
  • H
Cross-site Scripting (XSS)CVE-2026-90772
Affects amundsen-frontend | Versions [0,]
Has fix
pipPublished 24 Oct 2026
  • H
Denial of Service (DoS)CVE-2026-70646
Affects aiosend | Versions [,3.0.7)
Has fix
pipPublished 24 Oct 2026
  • C
Missing Authentication for Critical FunctionCVE-2026-85663
Affects aim | Versions [0,]
Has fix
pipPublished 24 Oct 2026
  • C
Missing Authentication for Critical FunctionCVE-2026-60112
Affects ait-gui | Versions [0,]
Has fix
pipPublished 24 Oct 2026
  • C
Missing Authentication for Critical FunctionCVE-2026-105105
Affects ait-core | Versions [,3.1.2)
Has fix
pipPublished 24 Oct 2026
  • M
Cross-site Request Forgery (CSRF)CVE-2026-82544
Affects wger | Versions [0,]
Has fix
pipPublished 24 Oct 2026
  • M
Missing AuthorizationCVE-2026-86254
Affects wger | Versions [0,]
Has fix
pipPublished 24 Oct 2026
  • M
Open RedirectCVE-2026-86256
Affects wger | Versions [0,]
Has fix
pipPublished 24 Oct 2026
  • M
CSV InjectionCVE-2026-86257
Affects wger | Versions [0,]
Has fix
pipPublished 24 Oct 2026
  • H
Denial of Service (DoS)CVE-2026-86255
Affects wger | Versions [0,]
Has fix
pipPublished 24 Oct 2026
  • M
Cross-site Request Forgery (CSRF)CVE-2026-45161
Affects wger | Versions [0,]
Has fix
pipPublished 24 Oct 2026
  • H
Improper Privilege ManagementCVE-2026-46434
Affects wger | Versions [0,]
Has fix
pipPublished 24 Oct 2026
  • H
Incorrect AuthorizationCVE-2026-43976
Affects wger | Versions [0,]
Has fix
pipPublished 24 Oct 2026
  • M
Insufficient Session ExpirationCVE-2026-46437
Affects wger | Versions [0,]
Has fix
pipPublished 24 Oct 2026
  • H
Missing AuthorizationCVE-2026-46438
Affects wger | Versions [0,]
Has fix
pipPublished 24 Oct 2026
  • M
Cross-site Scripting (XSS)CVE-2026-74793
Affects justhtml | Versions [,3.11.0)
Has fix
pipPublished 24 Oct 2026
  • L
Eval InjectionCVE-2026-101861
Affects lfx | Versions [,1.12.0)
Has fix
pipPublished 24 Oct 2026
  • L
Eval InjectionCVE-2026-101861
Affects langflow-base | Versions [0.0.94,1.12.0)
Has fix
pipPublished 24 Oct 2026
  • L
Eval InjectionCVE-2026-101861
Affects langflow | Versions [1.0.16,1.12.0)
Has fix
pipPublished 24 Oct 2026
  • M
Information ExposureCVE-2026-85709
Affects lightrag-hku | Versions [,1.5.5)
Has fix
pipPublished 24 Oct 2026
  • C
Brute ForceCVE-2026-85734
Affects lightrag-hku | Versions [,1.5.5)
Has fix
pipPublished 24 Oct 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-85740
Affects lightrag-hku | Versions [,1.5.5)
Has fix
pipPublished 24 Oct 2026
  • H
Timing AttackCVE-2026-85725
Affects lightrag-hku | Versions [,1.5.5)
Has fix
pipPublished 24 Oct 2026