Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-114508
Affects
laravel/framework
| Versions
>=12.45.0, <12.68.0
>=13.0.0, <13.27.0
H
XML External Entity (XXE) Injection
CVE-2026-94108
Affects
james-heinrich/getid3
| Versions
<1.9.27
H
Command Injection
CVE-2026-94106
Affects
james-heinrich/getid3
| Versions
<1.9.26
H
Improper Authorization
CVE-2026-79989
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.10.8
M
Missing Authentication for Critical Function
CVE-2026-104181
Affects
filament/filament
| Versions
>=4.0.0, <4.13.3
>=5.0.0, <5.8.3
C
Arbitrary Code Injection
CVE-2026-82531
Affects
smarty/smarty
| Versions
<4.5.8
>=5.0.0, <5.8.5
H
Denial of Service (DoS)
CVE-2026-107381
Affects
enshrined/svg-sanitize
| Versions
<1.0.0
H
Allocation of Resources Without Limits or Throttling
CVE-2026-107379
Affects
enshrined/svg-sanitize
| Versions
<1.0.0
M
Cross-site Scripting (XSS)
CVE-2026-107380
Affects
enshrined/svg-sanitize
| Versions
<1.0.0
M
SQL Injection
CVE-2026-88023
Affects
mongodb/mongodb
| Versions
>=1.1.0, <1.21.5
>=2.0.0, <2.4.2
H
Uncontrolled Recursion
CVE-2026-109449
Affects
symfony/expression-language
| Versions
<5.4.54
>=6.0.0, <6.4.48
>=7.0.0, <7.4.21
>=8.0.0, <8.1.9
H
Uncontrolled Recursion
CVE-2026-109449
Affects
symfony/symfony
| Versions
<5.4.54
>=6.0.0, <6.4.48
>=7.0.0, <7.4.21
>=8.0.0, <8.1.9
M
Improper Neutralization
CVE-2026-102601
Affects
league/flysystem
| Versions
<3.35.3
H
Uncontrolled Recursion
CVE-2026-109413
Affects
symfony/yaml
| Versions
>=4.1.0, <5.4.54
>=6.0.0, <6.4.45
>=7.0.0, <7.4.16
>=8.0.0, <8.1.6
H
Uncontrolled Recursion
CVE-2026-109413
Affects
symfony/symfony
| Versions
>=4.1.0, <5.4.54
>=6.0.0, <6.4.45
>=7.0.0, <7.4.16
>=8.0.0, <8.1.6
H
Regular Expression Denial of Service (ReDoS)
CVE-2026-108082
Affects
symfony/http-foundation
| Versions
>=4.1.0, <5.4.54
>=6.0.0, <6.4.46
>=7.0.0, <7.4.19
>=8.0.0, <8.1.7
H
Regular Expression Denial of Service (ReDoS)
CVE-2026-108082
Affects
symfony/symfony
| Versions
>=4.1.0, <5.4.54
>=6.0.0, <6.4.46
>=7.0.0, <7.4.19
>=8.0.0, <8.1.7
H
Allocation of Resources Without Limits or Throttling
CVE-2026-94644
Affects
apache/thrift
| Versions
<0.25.0
H
Uncaught Exception
CVE-2026-94642
Affects
apache/thrift
| Versions
<0.25.0
H
Uncontrolled Recursion
CVE-2026-96289
Affects
apache/thrift
| Versions
<0.25.0
H
Improper Validation of Specified Quantity in Input
CVE-2026-91137
Affects
apache/thrift
| Versions
<0.25.0
H
Inefficient Algorithmic Complexity
CVE-2026-94653
Affects
apache/thrift
| Versions
<0.25.0
M
Allocation of Resources Without Limits or Throttling
CVE-2026-94638
Affects
apache/thrift
| Versions
<0.25.0
H
NULL Pointer Dereference
CVE-2026-87117
Affects
apache/thrift
| Versions
<0.25.0
M
Missing Authorization
CVE-2026-104438
Affects
yeswiki/yeswiki
| Versions
<4.6.7
L
Cross-site Scripting (XSS)
CVE-2026-102279
Affects
laravel/framework
| Versions
<12.69.0
>=13.0.0, <13.30.0
H
Inefficient Algorithmic Complexity
CVE-2026-105830
Affects
league/commonmark
| Versions
>=2.0.0, <2.10.2
M
Cross-site Scripting (XSS)
CVE-2026-105829
Affects
league/commonmark
| Versions
>=1.3.0, <2.10.2
C
Out-of-bounds Write
CVE-2026-66837
Affects
apache/thrift
| Versions
<0.25.0
H
Allocation of Resources Without Limits or Throttling
CVE-2026-66858
Affects
apache/thrift
| Versions
<0.25.0