Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Authorization Bypass Through User-Controlled Key
Affects
easycorp/easyadmin-bundle
| Versions
>=4.0.0, <4.29.16
>=5.0.0, <5.5.1
C
Replay Attack
CVE-2026-73683
Affects
laravel/socialite
| Versions
>=0.0.0
H
Cross-site Scripting (XSS)
CVE-2026-32257
Affects
winter/wn-backend-module
| Versions
<1.2.13
H
Cross-site Scripting (XSS)
CVE-2026-32258
Affects
winter/wn-backend-module
| Versions
>=1.2.10, <1.2.13
M
SQL Injection
CVE-2026-32593
Affects
winter/wn-backend-module
| Versions
<1.2.13
M
Improper Handling of Insufficient Permissions or Privileges
CVE-2026-32639
Affects
winter/wn-cms-module
| Versions
<1.2.13
H
Authorization Bypass Through User-Controlled Key
CVE-2026-35445
Affects
winter/wn-backend-module
| Versions
<1.2.13
M
Cross-site Scripting (XSS)
CVE-2026-45694
Affects
librenms/librenms
| Versions
<26.5.0
M
SQL Injection
CVE-2026-47132
Affects
phpmyfaq/phpmyfaq
| Versions
<4.2.0-alpha
M
SQL Injection
CVE-2026-47132
Affects
thorsten/phpmyfaq
| Versions
<4.2.0-alpha
M
UNIX Symbolic Link (Symlink) Following
CVE-2026-62992
Affects
smarty/smarty
| Versions
<4.5.7
>=5.0.0, <5.8.2
H
Origin Validation Error
CVE-2026-19418
Affects
typo3/cms-install
| Versions
>=13.0.0, <13.4.34
>=14.0.0, <14.3.6
H
Origin Validation Error
CVE-2026-19418
Affects
typo3/cms-core
| Versions
>=13.0.0, <13.4.34
>=14.0.0, <14.3.6
H
Origin Validation Error
CVE-2026-19418
Affects
typo3/cms-backend
| Versions
>=13.0.0, <13.4.34
>=14.0.0, <14.3.6
C
Use of a Key Past its Expiration Date
CVE-2026-39923
Affects
flarum/framework
| Versions
<1.8.16
H
Insufficient Session Expiration
CVE-2026-39924
Affects
flarum/framework
| Versions
<1.8.16
M
CSV Injection
CVE-2026-18738
Affects
shlinkio/shlink
| Versions
>=5.0.0
H
SQL Injection
CVE-2026-18737
Affects
shlinkio/shlink
| Versions
>=3.3.1
M
Cross-site Scripting (XSS)
CVE-2026-67617
Affects
microweber/microweber
| Versions
>=0.0.0
M
Incorrect Implementation of Authentication Algorithm
CVE-2026-11430
Affects
getgrav/grav
| Versions
<2.0.9
M
Incomplete Denylist to Cross-Site Scripting
CVE-2026-71478
Affects
league/commonmark
| Versions
>=1.5.0, <2.9.0
H
Inefficient Algorithmic Complexity
Affects
league/commonmark
| Versions
>=2.0.0, <2.9.0
M
Directory Traversal
CVE-2026-62996
Affects
smarty/smarty
| Versions
>=5.0.0, <5.8.4
H
SQL Injection
CVE-2026-41453
Affects
krayin/laravel-crm
| Versions
<2.2.4
M
Use of Less Trusted Source
CVE-2026-63220
Affects
codeigniter4/framework
| Versions
<4.7.4
M
Cross-site Scripting (XSS)
CVE-2026-54717
Affects
silverstripe/cms
| Versions
<6.2.1
H
Directory Traversal
CVE-2026-69089
Affects
getgrav/grav
| Versions
<2.0.11
H
Arbitrary Code Injection
CVE-2026-69088
Affects
getgrav/grav
| Versions
>=2.0.7, <2.0.11
M
Asymmetric Resource Consumption (Amplification)
Affects
league/commonmark
| Versions
>=2.0.0, <2.9.0
H
Inefficient Algorithmic Complexity
Affects
league/commonmark
| Versions
>=1.5.0, <2.9.0