Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
SQL Injection
Affects @budibase/server | Versions *
No fix available
npmPublished 26 Jul 2026
  • M
Information Exposure
Affects @budibase/types | Versions <3.40.1
Has fix
npmPublished 26 Jul 2026
  • M
Information Exposure
Affects @budibase/backend-core | Versions <3.40.1
Has fix
npmPublished 26 Jul 2026
  • M
Information Exposure
Affects @budibase/server | Versions *
No fix available
npmPublished 26 Jul 2026
  • C
Improper Authentication
Affects @budibase/backend-core | Versions <3.39.30
Has fix
npmPublished 26 Jul 2026
  • H
Cross-site Request Forgery (CSRF)
Affects @budibase/server | Versions *
No fix available
npmPublished 26 Jul 2026
  • M
Information Exposure
Affects @budibase/worker | Versions *
No fix available
npmPublished 26 Jul 2026
  • H
Information Exposure
Affects @budibase/worker | Versions *
No fix available
npmPublished 26 Jul 2026
  • H
Incorrect Authorization
Affects @budibase/server | Versions *
No fix available
npmPublished 26 Jul 2026
  • H
Authorization Bypass Through User-Controlled Key
Affects @budibase/server | Versions *
No fix available
npmPublished 26 Jul 2026
  • M
Missing Authorization
Affects @budibase/worker | Versions *
No fix available
npmPublished 26 Jul 2026
  • M
Server-side Request Forgery (SSRF)
Affects @budibase/server | Versions *
No fix available
npmPublished 26 Jul 2026
  • M
Information Exposure
Affects @budibase/server | Versions *
No fix available
npmPublished 26 Jul 2026
  • H
SQL Injection
Affects @budibase/server | Versions *
No fix available
npmPublished 26 Jul 2026
  • M
Incorrect Regular Expression
Affects @astrojs/netlify | Versions <8.1.2
Has fix
npmPublished 26 Jul 2026
  • H
Incorrect Authorization
Affects vantage6 | Versions [0,]
Has fix
pipPublished 26 Jul 2026
  • M
Heap-based Buffer OverflowCVE-2026-54559
Affects pocketsphinx | Versions [,5.1.1)
Has fix
pipPublished 26 Jul 2026
  • H
Arbitrary File UploadCVE-2026-54567
Affects flask-reuploaded | Versions [,1.6.0)
Has fix
pipPublished 26 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-54503
Affects plone.app.textfield | Versions [,2.0.2)[3.0.0,3.0.2)[4.0.0,4.0.1)
Has fix
pipPublished 26 Jul 2026
  • C
Expression Language InjectionCVE-2026-41901
Affects org.thymeleaf:thymeleaf | Versions [,3.1.5.RELEASE)
Has fix
MavenPublished 26 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-54503
Affects plone.restapi | Versions [,9.15.6)[10.0.0,10.0.1)
Has fix
pipPublished 26 Jul 2026
  • H
Arbitrary Command InjectionCVE-2026-54449
Affects langbot | Versions [0,]
Has fix
pipPublished 26 Jul 2026
  • C
Use of Hard-coded CredentialsCVE-2026-61740
Affects lightrag-hku | Versions [,1.5.4)
Has fix
pipPublished 26 Jul 2026
  • H
Permissive Cross-domain Policy with Untrusted DomainsCVE-2026-61736
Affects lightrag-hku | Versions [,1.5.4)
Has fix
pipPublished 26 Jul 2026
  • H
Non-exit on Failed InitializationCVE-2026-16584
Affects awslabs.aws-api-mcp-server | Versions [0.2.13,1.3.47)
Has fix
pipPublished 26 Jul 2026
  • C
Malicious Package
Affects @akunsansan0/batu10 | Versions *
No fix available
npmPublished 26 Jul 2026
  • C
Malicious Package
Affects @akunsansan0/biru44 | Versions *
No fix available
npmPublished 26 Jul 2026
  • C
Malicious Package
Affects @aiscene/aiserver | Versions =1.4.1=1.5.8=1.7.0=1.7.4=1.7.5=1.8.0
Has fix
npmPublished 26 Jul 2026
  • C
Malicious Package
Affects @akrai/report_new | Versions *
No fix available
npmPublished 26 Jul 2026
  • C
Malicious Package
Affects @akunsansan0/karedok29 | Versions *
No fix available
npmPublished 26 Jul 2026