Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-69246
Affects
guzzlehttp/guzzle
| Versions
<7.15.2
>=8.0.0, <8.0.1
M
Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-69245
Affects
guzzlehttp/guzzle
| Versions
<7.15.2
>=8.0.0, <8.0.1
C
Resources Downloaded over Insecure Protocol
CVE-2026-66398
Affects
thorsten/phpmyfaq
| Versions
<4.1.6
C
Resources Downloaded over Insecure Protocol
CVE-2026-66398
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.6
H
Directory Traversal
CVE-2026-66397
Affects
thorsten/phpmyfaq
| Versions
<4.1.6
H
Directory Traversal
CVE-2026-66397
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.6
M
Cross-site Scripting (XSS)
CVE-2026-14856
Affects
tastyigniter/tastyigniter
| Versions
>=4.3.0
H
Directory Traversal
CVE-2026-58341
Affects
moodle/moodle
| Versions
>=4.5.0, <4.5.12
>=5.0.0, <5.0.8
>=5.1.0, <5.1.5
>=5.2.0, <5.2.1
H
Eval Injection
CVE-2026-45293
Affects
wp-coding-standards/wpcs
| Versions
>=0.14.1, <3.4.1
C
Malicious Package
CVE-2026-67595
Affects
webreinvent/vaahcms
| Versions
>=2.0.0
H
Authorization Bypass Through User-Controlled Key
CVE-2026-66412
Affects
leantime/leantime
| Versions
>=0.0.0
H
Cross-site Request Forgery (CSRF)
CVE-2026-66416
Affects
leantime/leantime
| Versions
>=0.0.0
H
Server-side Request Forgery (SSRF)
CVE-2026-66415
Affects
leantime/leantime
| Versions
>=0.0.0
M
Open Redirect
CVE-2026-66414
Affects
leantime/leantime
| Versions
>=0.0.0
H
Directory Traversal
CVE-2026-63222
Affects
codeigniter4/framework
| Versions
<4.7.4
H
SQL Injection
CVE-2026-63221
Affects
codeigniter4/framework
| Versions
>=4.3.0, <4.7.4
C
Arbitrary File Upload
CVE-2026-63223
Affects
codeigniter4/framework
| Versions
<4.7.4
M
Authorization Bypass Through User-Controlled Key
CVE-2026-68501
Affects
sylius/mollie-plugin
| Versions
<2.2.8
>=3.0.0, <3.2.4
>=3.3.0, <3.3.1
H
Authorization Bypass Through User-Controlled Key
CVE-2026-68500
Affects
sylius/mollie-plugin
| Versions
<2.2.8
>=3.0.0, <3.2.4
>=3.3.0, <3.3.1
H
Arbitrary File Upload
CVE-2026-53599
Affects
redaxo/source
| Versions
>=5.18.2, <5.21.1
H
Improper Authentication
CVE-2026-51953
Affects
feehi/cms
| Versions
>=0.0.0
H
Allocation of Resources Without Limits or Throttling
CVE-2026-61609
Affects
pterodactyl/panel
| Versions
>=1.7.0, <1.13.0
H
Improper Restriction of Security Token Assignment
CVE-2026-54593
Affects
pterodactyl/panel
| Versions
<1.12.3
M
Server-side Request Forgery (SSRF)
CVE-2026-63107
Affects
limesurvey/limesurvey
| Versions
>=0.0.0
M
Missing Authorization
CVE-2026-63092
Affects
medienbaecker/kirby-modules
| Versions
<5.5.8
M
Cross-site Scripting (XSS)
CVE-2026-26483
Affects
mettle/sendportal
| Versions
>=0.0.0
M
Directory Traversal
CVE-2026-16767
Affects
nelexa/zip
| Versions
>=0.0.0
H
Incorrect Permission Assignment for Critical Resource
CVE-2026-63358
Affects
filegator/filegator
| Versions
<7.14.3
H
Arbitrary Code Injection
CVE-2026-65693
Affects
microweber/microweber
| Versions
>=0.0.0
H
Arbitrary Argument Injection
Affects
pheditor/pheditor
| Versions
<2.0.7