Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
Malicious Package
Affects
sharpnes
| Versions
*
H
Use After Free
CVE-2026-96889
Affects
librsvg
| Versions
<2.57.5
>=2.58.0-beta.0 <2.60.3
>=2.61.0 <2.61.5
>=2.62.0 <2.62.4
>=2.63.0 <2.63.2
M
Directory Traversal
CVE-2026-104843
Affects
uv-extract
| Versions
<0.0.85
H
Allocation of Resources Without Limits or Throttling
CVE-2026-82458
Affects
thrift
| Versions
<0.25.0
M
Incorrect Permission Assignment for Critical Resource
CVE-2026-95627
Affects
tauri-plugin-dialog
| Versions
*
H
Integer Underflow (Wrap or Wraparound)
Affects
gix-packetline
| Versions
<0.21.5
M
Deserialization of Untrusted Data
Affects
yara-x
| Versions
<1.19.0
M
Server-side Request Forgery (SSRF)
CVE-2026-95623
Affects
tauri-plugin-http
| Versions
<2.7.0
H
Improper Verification of Cryptographic Signature
CVE-2026-95625
Affects
tauri-plugin-updater
| Versions
<2.12.0
M
Improper Authorization
CVE-2026-95624
Affects
tauri-plugin-updater
| Versions
<2.12.0
C
Malicious Package
Affects
logs-update
| Versions
*
H
Infinite loop
CVE-2026-43871
Affects
thrift
| Versions
<0.24.0
H
Incorrect Type Conversion or Cast
Affects
viperjs
| Versions
<0.2.2
C
Improper Verification of Cryptographic Signature
Affects
dcrypt-symmetric
| Versions
<2.0.0
C
Improper Verification of Cryptographic Signature
Affects
dcrypt-sign
| Versions
<2.0.0
H
Use After Free
Affects
dcrypt-api
| Versions
<2.0.0
H
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Affects
webbrowser
| Versions
<1.2.2
M
Insufficient Verification of Data Authenticity
Affects
triton-vm
| Versions
>=0.42.0-alpha.4 <4.0.0
C
Malicious Package
Affects
aronenao
| Versions
*
C
Malicious Package
Affects
aovine
| Versions
*
C
Malicious Package
Affects
proc-macro1
| Versions
*
C
Malicious Package
Affects
tinymember
| Versions
*
C
Malicious Package
Affects
arone
| Versions
*
C
Malicious Package
Affects
proc-macro-en
| Versions
*
C
Malicious Package
Affects
proc-macro-en
| Versions
=1.0.10
C
Malicious Package
Affects
proc-macro1
| Versions
*
C
Malicious Package
Affects
internment
| Versions
=0.8.7
C
Malicious Package
Affects
arrayref
| Versions
=0.3.10
C
Malicious Package
Affects
append-only-vec
| Versions
=0.1.9
H
Use After Free
Affects
rkyv
| Versions
>=0.8.0-rc.1 <0.8.17