Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Inefficient Algorithmic Complexity
CVE-2026-86434
Affects
league/commonmark
| Versions
>=2.0.0, <2.9.0
M
Directory Traversal
CVE-2026-62996
Affects
smarty/smarty
| Versions
>=5.0.0, <5.8.4
H
SQL Injection
CVE-2026-41453
Affects
krayin/laravel-crm
| Versions
<2.2.4
M
Use of Less Trusted Source
CVE-2026-63220
Affects
codeigniter4/framework
| Versions
<4.7.4
M
Cross-site Scripting (XSS)
CVE-2026-54717
Affects
silverstripe/cms
| Versions
<6.2.1
H
Directory Traversal
CVE-2026-69089
Affects
getgrav/grav
| Versions
<2.0.11
H
Arbitrary Code Injection
CVE-2026-69088
Affects
getgrav/grav
| Versions
>=2.0.7, <2.0.11
M
Asymmetric Resource Consumption (Amplification)
CVE-2026-86432
Affects
league/commonmark
| Versions
>=2.0.0, <2.9.0
H
Inefficient Algorithmic Complexity
CVE-2026-86435
Affects
league/commonmark
| Versions
>=1.5.0, <2.9.0
H
Excessive Platform Resource Consumption within a Loop
CVE-2026-71488
Affects
league/commonmark
| Versions
>=0.6.0, <2.9.0
H
Inefficient Algorithmic Complexity
CVE-2026-86433
Affects
league/commonmark
| Versions
>=1.5.0, <2.9.0
M
Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-69127
Affects
getkirby/cms
| Versions
<4.9.5
>=5.0.0-alpha.1, <5.5.2
M
Missing Authorization
CVE-2026-64664
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
M
Arbitrary File Upload
CVE-2026-71434
Affects
statamic/cms
| Versions
<5.74.3
>=6.0.0, <6.24.2
M
Cross-site Scripting (XSS)
CVE-2026-71435
Affects
statamic/cms
| Versions
<5.74.3
>=6.0.0, <6.24.2
H
Missing Authorization
CVE-2026-64662
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-64663
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
C
User Impersonation
CVE-2026-64665
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
M
Exposure of Resource to Wrong Sphere
CVE-2026-72782
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.2
>=5.0.0-RC1, <5.10.6
M
Cross-site Scripting (XSS)
CVE-2026-72787
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.10.8
M
Missing Authorization
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.1
>=5.0.0-RC1, <5.10.3
M
Incomplete List of Disallowed Inputs
CVE-2026-72779
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.2
>=5.0.0-RC1, <5.10.6
H
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-72778
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.2
>=5.0.0-RC1, <5.10.6
M
Missing Authorization
CVE-2026-14793
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.10.3
>=4.0.0-RC1, <4.18.1
M
Improper Authorization
CVE-2026-72786
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.10.8
H
Protection Mechanism Failure
CVE-2026-72781
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.3
>=5.0.0-RC1, <5.10.7
L
Directory Traversal
CVE-2026-72783
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.2
>=5.0.0-RC1, <5.10.6
C
Replay Attack
CVE-2026-72780
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.10.5
M
Incorrect Authorization
CVE-2026-72785
Affects
craftcms/cms
| Versions
<4.18.2
>=5.0.0-RC1, <5.10.6
C
Command Injection
CVE-2026-67434
Affects
squizlabs/php_codesniffer
| Versions
<3.13.6
>=4.0.0, <4.0.2