Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Server-side Request Forgery (SSRF)
Affects
langflow
| Versions
[,1.10.3)
H
Server-side Request Forgery (SSRF)
Affects
langflow-base
| Versions
[,0.10.3)
H
Server-side Request Forgery (SSRF)
Affects
lfx
| Versions
[,1.10.3)
H
Server-side Request Forgery (SSRF)
Affects
lfx-docling
| Versions
[,0.1.2)
C
Binding to an Unrestricted IP Address
CVE-2026-82456
Affects
argocd-mcp
| Versions
<0.9.0
M
Symlink Attack
CVE-2026-16077
Affects
astrbot
| Versions
[0,]
H
Missing Authorization
CVE-2026-75109
Affects
determined
| Versions
[0,]
H
Authorization Bypass Through User-Controlled Key
CVE-2026-51879
Affects
deeptutor
| Versions
[,1.4.1)
H
Directory Traversal
CVE-2026-51880
Affects
deeptutor
| Versions
[,1.4.1)
M
Improper Authorization
CVE-2026-51876
Affects
deeptutor
| Versions
[,1.4.1)
C
Arbitrary Code Injection
CVE-2026-51870
Affects
deeptutor
| Versions
[,1.4.1)
C
Arbitrary Code Injection
CVE-2026-51881
Affects
deeptutor
| Versions
[,1.4.1)
H
Authorization Bypass Through User-Controlled Key
CVE-2026-51878
Affects
deeptutor
| Versions
[,1.4.1)
H
Improper Restriction of Communication Channel to Intended Endpoints
CVE-2026-18655
Affects
awslabs.amazon-mq-mcp-server
| Versions
[,2.0.24)
M
Directory Traversal
CVE-2026-18953
Affects
awslabs.aws-transform-mcp-server
| Versions
[,0.1.5)
H
Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-85654
Affects
awslabs.dynamodb-mcp-server
| Versions
[,2.1.6)
H
Incomplete List of Disallowed Inputs
CVE-2026-85787
Affects
awslabs.postgres-mcp-server
| Versions
[,1.1.7)
C
Command Injection
CVE-2026-87911
Affects
awslabs.postgres-mcp-server
| Versions
[,1.1.7)
M
Unverified Ownership
CVE-2026-87913
Affects
awslabs.security-agent-mcp-server
| Versions
[,0.2.0)
H
Cross-site Scripting (XSS)
CVE-2026-90772
Affects
amundsen-frontend
| Versions
[0,]
H
Denial of Service (DoS)
CVE-2026-70646
Affects
aiosend
| Versions
[,3.0.7)
C
Missing Authentication for Critical Function
CVE-2026-85663
Affects
aim
| Versions
[0,]
C
Missing Authentication for Critical Function
CVE-2026-60112
Affects
ait-gui
| Versions
[0,]
C
Missing Authentication for Critical Function
CVE-2026-105105
Affects
ait-core
| Versions
[,3.1.2)
M
Cross-site Request Forgery (CSRF)
CVE-2026-82544
Affects
wger
| Versions
[0,]
M
Missing Authorization
CVE-2026-86254
Affects
wger
| Versions
[0,]
M
Open Redirect
CVE-2026-86256
Affects
wger
| Versions
[0,]
M
CSV Injection
CVE-2026-86257
Affects
wger
| Versions
[0,]
H
Denial of Service (DoS)
CVE-2026-86255
Affects
wger
| Versions
[0,]
M
Cross-site Request Forgery (CSRF)
CVE-2026-45161
Affects
wger
| Versions
[0,]