Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Malicious Package
Affects @greenlake/auth | Versions =3.0.0
Has fix
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects @greenlake/mfe-login-url | Versions =3.0.0=1.0.0=2.0.0
Has fix
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects @greenlake/context-pane | Versions =1.0.0=3.0.0
Has fix
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects dsh-native | Versions =1.4.1
Has fix
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects numbors | Versions =1.6.1
Has fix
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects orderly-plugin-liquidity-heatmap | Versions =0.0.0-stage
Has fix
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects css-hnhxwd-polyfill | Versions *
No fix available
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects css-flexgap-shim | Versions *
No fix available
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects @regex33-hackerone/tb-compat | Versions *
No fix available
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects css-grid-snap-util | Versions *
No fix available
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects bow-test | Versions *
No fix available
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects @s4yhiitestpoc/scan-control-a | Versions *
No fix available
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects @s4yhiitestpoc/scan-dns-c | Versions *
No fix available
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects @s4yhiitestpoc/r2-echo | Versions *
No fix available
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects @s4yhiitestpoc/r2-control | Versions *
No fix available
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects @s4yhiitestpoc/scan-https-dualuse-e | Versions *
No fix available
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects @s4yhiitestpoc/scan-echo-b | Versions *
No fix available
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects @s4yhiitestpoc/r2-https-dualuse | Versions *
No fix available
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects @s4yhiitestpoc/r2-dns | Versions *
No fix available
npmPublished 26 Oct 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2026-87830
Affects org.apache.wss4j:wss4j-ws-security-policy-stax | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
  • H
Improper Validation of Specified Index, Position, or Offset in InputCVE-2026-85532
Affects org.apache.wss4j:wss4j-ws-security-stax | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
  • H
Improper Validation of Specified Index, Position, or Offset in InputCVE-2026-85532
Affects org.apache.wss4j:wss4j-ws-security-common | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
  • M
Incomplete CleanupCVE-2026-93446
Affects org.apache.tomcat:tomcat-coyote | Versions [9.0.90,9.0.123)[10.1.25,10.1.61)[11.0.0-M21,11.0.27)
Has fix
MavenPublished 26 Oct 2026
  • M
Incomplete CleanupCVE-2026-93446
Affects org.apache.tomcat.embed:tomcat-embed-core | Versions [9.0.90,9.0.123)[10.1.25,10.1.61)[11.0.0-M21,11.0.27)
Has fix
MavenPublished 26 Oct 2026
  • M
Incomplete CleanupCVE-2026-93446
Affects org.apache.tomcat.experimental:tomcat-embed-programmatic | Versions [9.0.90,9.0.123)[10.1.25,10.1.61)[11.0.0-M21,11.0.27)
Has fix
MavenPublished 26 Oct 2026
  • M
Incomplete CleanupCVE-2026-78437
Affects org.apache.tomcat:tomcat-coyote | Versions [9.0.116,9.0.122)[10.1.53,10.1.60)[11.0.19,11.0.26)
Has fix
MavenPublished 26 Oct 2026
  • M
Incomplete CleanupCVE-2026-78437
Affects org.apache.tomcat.embed:tomcat-embed-core | Versions [9.0.116,9.0.122)[10.1.53,10.1.60)[11.0.19,11.0.26)
Has fix
MavenPublished 26 Oct 2026
  • M
Incomplete CleanupCVE-2026-78437
Affects org.apache.tomcat.experimental:tomcat-embed-programmatic | Versions [9.0.116,9.0.122)[10.1.53,10.1.60)[11.0.19,11.0.26)
Has fix
MavenPublished 26 Oct 2026
  • M
Authentication Bypass by Primary WeaknessCVE-2026-75973
Affects org.apache.tomcat.embed:tomcat-embed-core | Versions [9.0.0.M4,9.0.122)[10.1.0-M1,10.1.60)[11.0.0-M1,11.0.26)
Has fix
MavenPublished 26 Oct 2026
  • M
Authentication Bypass by Primary WeaknessCVE-2026-75973
Affects org.apache.tomcat.experimental:tomcat-embed-programmatic | Versions [9.0.0.M4,9.0.122)[10.1.0-M1,10.1.60)[11.0.0-M1,11.0.26)
Has fix
MavenPublished 26 Oct 2026