Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Excessive Platform Resource Consumption within a Loop
CVE-2026-71488
Affects
league/commonmark
| Versions
>=0.6.0, <2.9.0
H
Inefficient Algorithmic Complexity
Affects
league/commonmark
| Versions
>=1.5.0, <2.9.0
M
Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-69127
Affects
getkirby/cms
| Versions
<4.9.5
>=5.0.0-alpha.1, <5.5.2
M
Missing Authorization
CVE-2026-64664
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
M
Arbitrary File Upload
CVE-2026-71434
Affects
statamic/cms
| Versions
<5.74.3
>=6.0.0, <6.24.2
M
Cross-site Scripting (XSS)
CVE-2026-71435
Affects
statamic/cms
| Versions
<5.74.3
>=6.0.0, <6.24.2
H
Missing Authorization
CVE-2026-64662
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-64663
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
C
User Impersonation
CVE-2026-64665
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
M
Exposure of Resource to Wrong Sphere
CVE-2026-72782
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.2
>=5.0.0-RC1, <5.10.6
M
Cross-site Scripting (XSS)
CVE-2026-72787
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.10.8
M
Missing Authorization
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.1
>=5.0.0-RC1, <5.10.3
M
Incomplete List of Disallowed Inputs
CVE-2026-72779
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.2
>=5.0.0-RC1, <5.10.6
H
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-72778
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.2
>=5.0.0-RC1, <5.10.6
M
Missing Authorization
CVE-2026-14793
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.10.3
>=4.0.0-RC1, <4.18.1
M
Improper Authorization
CVE-2026-72786
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.10.8
H
Protection Mechanism Failure
CVE-2026-72781
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.3
>=5.0.0-RC1, <5.10.7
L
Directory Traversal
CVE-2026-72783
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.2
>=5.0.0-RC1, <5.10.6
C
Replay Attack
CVE-2026-72780
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.10.5
M
Incorrect Authorization
CVE-2026-72785
Affects
craftcms/cms
| Versions
<4.18.2
>=5.0.0-RC1, <5.10.6
C
Command Injection
CVE-2026-67434
Affects
squizlabs/php_codesniffer
| Versions
<3.13.6
>=4.0.0, <4.0.2
M
Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-69246
Affects
guzzlehttp/guzzle
| Versions
<7.15.2
>=8.0.0, <8.0.1
M
Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-69245
Affects
guzzlehttp/guzzle
| Versions
<7.15.2
>=8.0.0, <8.0.1
C
Resources Downloaded over Insecure Protocol
CVE-2026-66398
Affects
thorsten/phpmyfaq
| Versions
<4.1.6
C
Resources Downloaded over Insecure Protocol
CVE-2026-66398
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.6
H
Directory Traversal
CVE-2026-66397
Affects
thorsten/phpmyfaq
| Versions
<4.1.6
H
Directory Traversal
CVE-2026-66397
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.6
M
Cross-site Scripting (XSS)
CVE-2026-14856
Affects
tastyigniter/tastyigniter
| Versions
>=4.3.0
H
Directory Traversal
CVE-2026-58341
Affects
moodle/moodle
| Versions
>=4.5.0, <4.5.12
>=5.0.0, <5.0.8
>=5.1.0, <5.1.5
>=5.2.0, <5.2.1
H
Eval Injection
CVE-2026-45293
Affects
wp-coding-standards/wpcs
| Versions
>=0.14.1, <3.4.1