Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Memory Allocation with Excessive Size Value
CVE-2026-63772
Affects
github.com/apache/thrift/lib/go/thrift
| Versions
<0.25.0
M
Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-73179
Affects
org.apache.cxf:cxf-rt-rs-security-oauth2
| Versions
[,3.6.13)
[4.1.0,4.1.9)
[4.2.0,4.2.4)
H
Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-100227
Affects
org.apache.cxf:cxf-rt-rs-security-xml
| Versions
[,3.6.13)
[4.0.0,4.1.9)
[4.2.0,4.2.4)
M
Prototype Pollution
CVE-2026-91860
Affects
com.vaadin:vaadin-charts-flow
| Versions
[23.0.0 ,23.6.14)
[24.0.0 ,24.9.21)
[24.10.0 ,24.10.10)
[25.0.0 ,25.1.12)
[25.2.0 ,25.2.7)
M
Prototype Pollution
CVE-2026-91860
Affects
com.vaadin:vaadin-core
| Versions
[24.0.0 ,24.9.21)
[24.10.0 ,24.10.10)
[25.0.0 ,25.1.12)
[25.2.0 ,25.2.7)
M
Prototype Pollution
CVE-2026-91860
Affects
com.vaadin:vaadin
| Versions
[23.0.0 ,23.6.14)
[24.0.0 ,24.9.21)
[24.10.0 ,24.10.10)
[25.0.0 ,25.1.12)
[25.2.0 ,25.2.7)
M
Prototype Pollution
CVE-2026-91860
Affects
@vaadin/component-base
| Versions
>=24.7.0 <24.9.17
>=24.10.0 <24.10.4
>=25.0.0 <25.1.11
>=25.2.0 <25.2.9
M
Prototype Pollution
CVE-2026-91860
Affects
@vaadin/charts
| Versions
>=23.0.0 <23.6.5
>=24.0.0 <24.9.18
>=24.10.0 <24.10.5
>=25.0.0 <25.1.12
>=25.2.0 <25.2.9
H
Insertion of Sensitive Information Into Sent Data
CVE-2026-107714
Affects
mechanize
| Versions
<2.14.1
M
Insertion of Sensitive Information Into Sent Data
CVE-2026-107399
Affects
mechanize
| Versions
<2.14.1
M
Insertion of Sensitive Information Into Sent Data
CVE-2026-107715
Affects
mechanize
| Versions
<2.14.1
M
NULL Pointer Dereference
CVE-2026-111373
Affects
freerdp/freerdp
| Versions
[,3.32.0)
H
Integer Overflow or Wraparound
CVE-2026-95616
Affects
org.apache.wss4j:wss4j-ws-security-common
| Versions
[,2.4.4)
[3.0.0,3.0.6)
[4.0.0,4.0.2)
L
Replay Attack
CVE-2026-92899
Affects
org.apache.wss4j:wss4j-ws-security-stax
| Versions
[,2.4.4)
[3.0.0,3.0.6)
[4.0.0,4.0.2)
L
Replay Attack
CVE-2026-92899
Affects
org.apache.wss4j:wss4j-ws-security-dom
| Versions
[,2.4.4)
[3.0.0,3.0.6)
[4.0.0,4.0.2)
M
Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-89238
Affects
org.apache.wss4j:wss4j-ws-security-dom
| Versions
[,2.4.4)
[3.0.0,3.0.6)
[4.0.0,4.0.2)
H
Improperly Implemented Security Check for Standard
CVE-2026-92121
Affects
org.apache.wss4j:wss4j-ws-security-stax
| Versions
[,2.4.4)
[3.0.0,3.0.6)
[4.0.0,4.0.2)
H
Authentication Bypass by Assumed-Immutable Data
CVE-2026-88920
Affects
org.apache.wss4j:wss4j-ws-security-dom
| Versions
[,2.4.4)
[3.0.0,3.0.6)
[4.0.0,4.0.2)
C
Malicious Package
Affects
dsh-plugin-blender-3d
| Versions
=0.2.1
C
Malicious Package
Affects
zagents-framework
| Versions
[99.25.30.10b5]
[6.25.30.10b5]
C
Malicious Package
Affects
changes-lxc-wrapper
| Versions
[0.1.0]
[0.0.0]
C
Malicious Package
Affects
claudeopusenifile
| Versions
[0.1.3]
C
Malicious Package
Affects
dictmerge-lite
| Versions
[1.0.0]
C
Malicious Package
Affects
claudeopuseni
| Versions
[0.1.1]
[0.1.0]
C
Malicious Package
Affects
claudeopusfile
| Versions
[0.1.2]
[0.1.1]
C
Malicious Package
Affects
publish-poc-base
| Versions
=1.0.7
C
Malicious Package
Affects
publish-poc-test3
| Versions
=1.0.21
=1.0.26
=1.0.19
=1.0.22
=1.0.18
=1.0.27
=1.0.15
C
Malicious Package
Affects
@worca/app
| Versions
=1.14.0-rc.2
C
Malicious Package
Affects
@walknpm/todo-cli
| Versions
=2.0.1
C
Malicious Package
Affects
@sxm-web/client-sdk-core
| Versions
=13.3.7
=3.0.0
=1.1.0
=2.0.0
=1.0.1
=1.0.0
=0.0.1