Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
SQL Injection
CVE-2026-46670
Affects
yeswiki/yeswiki
| Versions
<4.6.4
M
Server-side Request Forgery (SSRF)
CVE-2026-46683
Affects
knplabs/knp-snappy
| Versions
<1.7.0
H
Command Injection
CVE-2026-46643
Affects
knplabs/knp-snappy
| Versions
<1.7.1
C
SQL Injection
CVE-2026-9082
Affects
drupal/core
| Versions
>=8.9.0-beta1, <10.4.10
>=10.5.0-beta1, <10.5.10
>=10.6.0-beta1, <10.6.9
>=11.0.0-alpha1, <11.1.10
>=11.2.0-alpha1, <11.2.12
>=11.3.0-alpha1, <11.3.10
H
Missing Authorization
CVE-2026-35671
Affects
thorsten/phpmyfaq
| Versions
<4.1.3
H
Missing Authorization
CVE-2026-35671
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.3
H
Insecure Default Initialization of Resource
CVE-2026-35672
Affects
thorsten/phpmyfaq
| Versions
<4.1.3
H
Insecure Default Initialization of Resource
CVE-2026-35672
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.3
H
Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-35676
Affects
thorsten/phpmyfaq
| Versions
<4.1.3
H
Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-35676
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.3
H
Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-35675
Affects
thorsten/phpmyfaq
| Versions
<4.1.3
H
Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-35675
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.3
C
Deserialization of Untrusted Data
CVE-2026-45077
Affects
symfony/monolog-bridge
| Versions
<5.4.52
>=6.0.0-BETA1, <6.4.40
>=7.0.0-BETA1, <7.4.12
>=8.0.0-BETA1, <8.0.12
M
Missing Authentication for Critical Function
CVE-2026-47212
Affects
symfony/twilio-notifier
| Versions
>=6.4.0-BETA1, <6.4.40
>=7.0.0-BETA1, <7.4.12
>=8.0.0-BETA1, <8.0.12
M
Missing Authentication for Critical Function
CVE-2026-45755
Affects
symfony/mailtrap-mailer
| Versions
<7.4.12
>=8.0.0-BETA1, <8.0.12
C
Arbitrary Argument Injection
CVE-2026-45068
Affects
symfony/mailer
| Versions
<5.4.52
>=6.0.0-BETA1, <6.4.40
>=7.0.0-BETA1, <7.4.12
>=8.0.0-BETA1, <8.0.12
M
Missing Authentication for Critical Function
CVE-2026-45754
Affects
symfony/lox24-notifier
| Versions
>=6.4, <6.4.40
>=7.0, <7.4.12
>=8.0, <8.0.12
M
Regular Expression Denial of Service (ReDoS)
CVE-2026-45756
Affects
symfony/json-path
| Versions
<7.4.12
>=8.0.0-BETA1, <8.0.12
M
Interpretation Conflict
CVE-2026-45066
Affects
symfony/html-sanitizer
| Versions
<6.4.40
>=7.0.0-BETA1, <7.4.12
>=8.0.0-BETA1, <8.0.12
M
Cross-site Scripting (XSS)
CVE-2026-45753
Affects
symfony/html-sanitizer
| Versions
<6.4.40
>=7.0.0-BETA1, <7.4.12
>=8.0.0-BETA1, <8.0.12
M
User Interface (UI) Misrepresentation of Critical Information
CVE-2026-45064
Affects
symfony/html-sanitizer
| Versions
<6.4.40
>=7.0.0-BETA1, <7.4.12
>=8.0.0-BETA1, <8.0.12
M
Arbitrary Argument Injection
CVE-2026-46626
Affects
symfony/runtime
| Versions
>=5.4.46, <5.4.52
>=6.4.14, <6.4.40
>=7.1.7, <7.4.12
>=8.0.0-BETA1, <8.0.12
H
XML External Entity (XXE) Injection
CVE-2026-45071
Affects
symfony/dom-crawler
| Versions
<5.4.52
>=6.0.0-BETA1, <6.4.40
>=7.0.0-BETA1, <7.4.12
>=8.0.0-BETA1, <8.0.12
H
Improper Verification of Cryptographic Signature
CVE-2026-45069
Affects
symfony/security-http
| Versions
>=6.3.0-BETA1, <6.4.40
>=7.4.0-BETA1, <7.4.12
>=8.0.0-BETA1, <8.0.12
H
User Impersonation
CVE-2026-45074
Affects
symfony/security-http
| Versions
>=7.1.0-BETA1, <7.4.12
>=8.0.0-BETA1, <8.0.12
M
User Impersonation
CVE-2026-45063
Affects
symfony/security-http
| Versions
<5.4.52
>=6.0.0-BETA1, <6.4.40
>=7.0.0-BETA1, <7.4.12
>=8.0.0-BETA1, <8.0.12
C
Embedded Malicious Code
Affects
laravel-lang/actions
| Versions
>=0.0.0
C
Embedded Malicious Code
Affects
laravel-lang/attributes
| Versions
>=0.0.0
C
Embedded Malicious Code
Affects
laravel-lang/http-statuses
| Versions
>=0.0.0
C
Embedded Malicious Code
Affects
laravel-lang/lang
| Versions
>=0.0.0