Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Improper Neutralization
CVE-2025-11468
Affects
python-unversioned-command
| Versions
<0:3.9.25-1.amzn2023.0.4
H
CRLF Injection
CVE-2025-15282
Affects
python3-tkinter
| Versions
<0:3.9.25-1.amzn2023.0.4
H
Direct Request ('Forced Browsing')
CVE-2026-21715
Affects
nodejs24-full-i18n
| Versions
<1:24.14.1-1.amzn2023.0.1
M
Directory Traversal
CVE-2026-27139
Affects
yq-debuginfo
| Versions
<0:4.47.1-12.amzn2023
H
Arbitrary Argument Injection
CVE-2026-4519
Affects
python3-debug
| Versions
<0:3.9.25-1.amzn2023.0.4
L
Out-of-bounds Read
CVE-2026-1764
Affects
tracker-miners
| Versions
<0:3.7.4-2.amzn2023.0.2
L
Buffer Access with Incorrect Length Value
CVE-2026-1767
Affects
tracker-miners
| Versions
<0:3.7.4-2.amzn2023.0.2
H
CRLF Injection
CVE-2025-15282
Affects
python-unversioned-command
| Versions
<0:3.9.25-1.amzn2023.0.4
H
Improper Handling of Inconsistent Special Elements
CVE-2026-21712
Affects
nodejs24-docs
| Versions
<1:24.14.1-1.amzn2023.0.1
H
Incorrect Execution-Assigned Permissions
CVE-2026-21716
Affects
v8-11.3-devel
| Versions
<3:11.3.244.8-1.20.20.2.1.amzn2023.0.1
H
Incorrect Execution-Assigned Permissions
CVE-2026-21716
Affects
nodejs24-libs-debuginfo
| Versions
<1:24.14.1-1.amzn2023.0.1
H
CRLF Injection
CVE-2026-0672
Affects
python-unversioned-command
| Versions
<0:3.9.25-1.amzn2023.0.4
H
Direct Request ('Forced Browsing')
CVE-2026-21715
Affects
v8-13.6-devel
| Versions
<3:13.6.233.17-1.24.14.1.1.amzn2023.0.1
H
Missing Release of Resource after Effective Lifetime
CVE-2026-21714
Affects
nodejs24-npm
| Versions
<1:11.11.0-1.24.14.1.1.amzn2023.0.1
H
Direct Request ('Forced Browsing')
CVE-2026-21715
Affects
nodejs24-docs
| Versions
<1:24.14.1-1.amzn2023.0.1
H
Direct Request ('Forced Browsing')
CVE-2026-21715
Affects
nodejs20-full-i18n
| Versions
<1:20.20.2-1.amzn2023.0.1
H
Direct Request ('Forced Browsing')
CVE-2026-21715
Affects
nodejs20
| Versions
<1:20.20.2-1.amzn2023.0.1
H
CRLF Injection
CVE-2026-1299
Affects
python3-idle
| Versions
<0:3.9.25-1.amzn2023.0.4
H
Improper Handling of Inconsistent Special Elements
CVE-2026-21712
Affects
nodejs24-debugsource
| Versions
<1:24.14.1-1.amzn2023.0.1
H
Information Exposure
CVE-2026-21713
Affects
nodejs20-libs
| Versions
<1:20.20.2-1.amzn2023.0.1
H
Directory Traversal
CVE-2026-26960
Affects
nodejs24-debuginfo
| Versions
<1:24.14.1-1.amzn2023.0.1
H
Information Exposure
CVE-2026-21713
Affects
nodejs24-full-i18n
| Versions
<1:24.14.1-1.amzn2023.0.1
H
Access of Resource Using Incompatible Type ('Type Confusion')
CVE-2026-21710
Affects
v8-11.3-devel
| Versions
<3:11.3.244.8-1.20.20.2.1.amzn2023.0.1
H
Reversible One-Way Hash
CVE-2026-21717
Affects
nodejs22
| Versions
<1:22.22.2-1.amzn2023.0.1
H
Access of Resource Using Incompatible Type ('Type Confusion')
CVE-2026-21710
Affects
nodejs22-docs
| Versions
<1:22.22.2-1.amzn2023.0.1
H
Incorrect Execution-Assigned Permissions
CVE-2026-21716
Affects
nodejs20-npm
| Versions
<1:10.8.2-1.20.20.2.1.amzn2023.0.1
H
Improper Handling of Inconsistent Special Elements
CVE-2026-21712
Affects
nodejs24-npm
| Versions
<1:11.11.0-1.24.14.1.1.amzn2023.0.1
H
Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
CVE-2026-33186
Affects
soci-snapshotter
| Versions
<0:0.13.0-1.amzn2023.0.1
H
Directory Traversal
CVE-2026-27139
Affects
soci-snapshotter
| Versions
<0:0.13.0-1.amzn2023.0.1
H
Access of Resource Using Incompatible Type ('Type Confusion')
CVE-2026-21710
Affects
nodejs24-full-i18n
| Versions
<1:24.14.1-1.amzn2023.0.1