Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
L
Arbitrary File Upload
CVE-2026-54179
Affects
backpack/crud
| Versions
>=6.0.0, <6.8.14
>=7.0.0, <7.0.38
H
Authorization Bypass Through User-Controlled Key
CVE-2026-54178
Affects
backpack/crud
| Versions
>=5.0.0, <6.8.12
>=7.0.0, <7.0.35
H
Arbitrary File Upload
CVE-2026-54177
Affects
backpack/crud
| Versions
>=6.0.0, <6.8.14
>=7.0.0, <7.0.38
H
Unverified Password Change
CVE-2026-54176
Affects
backpack/crud
| Versions
>=6.0.0, <6.8.14
>=7.0.0, <7.0.38
H
Unverified Password Change
CVE-2026-54175
Affects
backpack/crud
| Versions
<6.8.11
>=7.0.0-alpha.1, <7.0.34
M
Incomplete Comparison with Missing Factors
CVE-2026-54181
Affects
backpack/crud
| Versions
>=6.0.0, <6.8.14
>=7.0.0, <7.0.38
C
Improper Encoding or Escaping of Output
CVE-2026-54182
Affects
backpack/crud
| Versions
>=4.1.0, <4.1.72
>=5.0.0, <5.6.2
>=6.0.0, <6.8.13
>=7.0.0, <7.0.36
H
Missing Authorization
CVE-2026-57570
Affects
backpack/crud
| Versions
>=6.0.0, <6.8.15
>=7.0.0, <7.0.47
M
Directory Traversal
Affects
winter/wn-system-module
| Versions
<1.2.13
H
Authorization Bypass Through User-Controlled Key
Affects
easycorp/easyadmin-bundle
| Versions
>=4.0.0, <4.29.16
>=5.0.0, <5.5.1
C
Replay Attack
CVE-2026-73683
Affects
laravel/socialite
| Versions
<5.30.0
H
Cross-site Scripting (XSS)
CVE-2026-32257
Affects
winter/wn-backend-module
| Versions
<1.2.13
H
Cross-site Scripting (XSS)
CVE-2026-32258
Affects
winter/wn-backend-module
| Versions
>=1.2.10, <1.2.13
M
SQL Injection
CVE-2026-32593
Affects
winter/wn-backend-module
| Versions
<1.2.13
M
Improper Handling of Insufficient Permissions or Privileges
CVE-2026-32639
Affects
winter/wn-cms-module
| Versions
<1.2.13
H
Authorization Bypass Through User-Controlled Key
CVE-2026-35445
Affects
winter/wn-backend-module
| Versions
<1.2.13
M
Cross-site Scripting (XSS)
CVE-2026-45694
Affects
librenms/librenms
| Versions
<26.5.0
M
SQL Injection
CVE-2026-47132
Affects
phpmyfaq/phpmyfaq
| Versions
<4.2.0-alpha
M
SQL Injection
CVE-2026-47132
Affects
thorsten/phpmyfaq
| Versions
<4.2.0-alpha
M
UNIX Symbolic Link (Symlink) Following
CVE-2026-62992
Affects
smarty/smarty
| Versions
<4.5.7
>=5.0.0, <5.8.2
H
Origin Validation Error
CVE-2026-19418
Affects
typo3/cms-install
| Versions
>=13.0.0, <13.4.34
>=14.0.0, <14.3.6
H
Origin Validation Error
CVE-2026-19418
Affects
typo3/cms-core
| Versions
>=13.0.0, <13.4.34
>=14.0.0, <14.3.6
H
Origin Validation Error
CVE-2026-19418
Affects
typo3/cms-backend
| Versions
>=13.0.0, <13.4.34
>=14.0.0, <14.3.6
C
Use of a Key Past its Expiration Date
CVE-2026-39923
Affects
flarum/framework
| Versions
<1.8.16
H
Insufficient Session Expiration
CVE-2026-39924
Affects
flarum/framework
| Versions
<1.8.16
M
CSV Injection
CVE-2026-18738
Affects
shlinkio/shlink
| Versions
>=5.0.0
H
SQL Injection
CVE-2026-18737
Affects
shlinkio/shlink
| Versions
>=3.3.1
M
Cross-site Scripting (XSS)
CVE-2026-67617
Affects
microweber/microweber
| Versions
>=0.0.0
M
Incorrect Implementation of Authentication Algorithm
CVE-2026-11430
Affects
getgrav/grav
| Versions
<2.0.9
M
Incomplete Denylist to Cross-Site Scripting
CVE-2026-71478
Affects
league/commonmark
| Versions
>=1.5.0, <2.9.0