Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Incorrect Authorization
CVE-2026-47230
Affects
admidio/admidio
| Versions
<5.0.10
M
Cross-site Request Forgery (CSRF)
CVE-2026-47229
Affects
admidio/admidio
| Versions
<5.0.10
M
Insertion of Sensitive Information into Log File
CVE-2026-47234
Affects
admidio/admidio
| Versions
<5.0.10
M
Cross-site Request Forgery (CSRF)
CVE-2026-47232
Affects
admidio/admidio
| Versions
<5.0.10
H
Incorrect Authorization
CVE-2026-47231
Affects
admidio/admidio
| Versions
<5.0.10
H
Missing Authorization
CVE-2026-47226
Affects
admidio/admidio
| Versions
<5.0.10
H
Incorrect Authorization
CVE-2026-47227
Affects
admidio/admidio
| Versions
<5.0.10
M
Cross-site Request Forgery (CSRF)
CVE-2026-47228
Affects
admidio/admidio
| Versions
<5.0.10
H
Cross-site Scripting (XSS)
CVE-2026-45368
Affects
getkirby/cms
| Versions
<4.9.1
>=5.0.0-alpha.1, <5.4.1
M
Missing Authorization
CVE-2026-45334
Affects
getkirby/cms
| Versions
<4.9.1
>=5.0.0-alpha.1, <5.4.1
H
Cross-site Scripting (XSS)
CVE-2026-44175
Affects
getkirby/cms
| Versions
<4.9.1
>=5.0.0-alpha.1, <5.4.1
M
Missing Authorization
CVE-2026-44176
Affects
getkirby/cms
| Versions
<4.9.1
>=5.0.0-alpha.1, <5.4.1
H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-44174
Affects
getkirby/cms
| Versions
<4.9.1
>=5.0.0-alpha.1, <5.4.1
H
PHP Remote File Inclusion
CVE-2026-44177
Affects
getkirby/cms
| Versions
>=5.3.0, <5.4.1
M
Authorization Bypass Through User-Controlled Key
CVE-2026-47266
Affects
verbb/formie
| Versions
<2.2.21
>=3.0.0-beta.1, <3.1.26
M
Incorrect Authorization
CVE-2026-46636
Affects
twig/twig
| Versions
<3.27.0
L
Incorrect Authorization
CVE-2026-48806
Affects
twig/twig
| Versions
<3.27.0
M
Incorrect Authorization
CVE-2026-48808
Affects
twig/twig
| Versions
<3.27.0
L
Incorrect Authorization
CVE-2026-48805
Affects
twig/twig
| Versions
<3.27.0
M
Missing Authorization
CVE-2026-31266
Affects
craftcms/cms
| Versions
>=0.0.0
M
Improper Validation of Specified Index, Position, or Offset in Input
CVE-2026-48807
Affects
twig/twig
| Versions
<3.27.0
M
Cross-site Scripting (XSS)
CVE-2026-47759
Affects
tinymce/tinymce
| Versions
<7.9.3
>=8.0.0, <8.5.1
M
Cross-site Scripting (XSS)
CVE-2026-47760
Affects
tinymce/tinymce
| Versions
>=6.8.0, <7.1.0
M
Cross-site Scripting (XSS)
CVE-2026-47762
Affects
tinymce/tinymce
| Versions
<7.9.3
>=8.0.0, <8.5.1
M
Cross-site Scripting (XSS)
CVE-2026-47761
Affects
tinymce/tinymce
| Versions
<7.9.3
>=8.0.0, <8.5.1
M
Improper Verification of Cryptographic Signature
CVE-2026-48747
Affects
symfony/symfony
| Versions
<7.4.13
>=8.0.0-BETA1, <8.0.13
M
Improper Encoding or Escaping of Output
CVE-2026-48784
Affects
symfony/symfony
| Versions
<5.4.53
>=6.0.0-BETA1, <6.4.41
>=7.0.0-BETA1, <7.4.13
>=8.0.0-BETA1, <8.0.13
M
Improper Encoding or Escaping of Output
CVE-2026-48760
Affects
symfony/symfony
| Versions
<6.4.41
>=7.0.0-BETA1, <7.4.13
>=8.0.0-BETA1, <8.0.13
M
Cross-site Scripting (XSS)
CVE-2026-48761
Affects
symfony/symfony
| Versions
<6.4.41
>=7.0.0-BETA1, <7.4.13
>=8.0.0-BETA1, <8.0.13
H
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-48489
Affects
symfony/symfony
| Versions
<5.4.53
>=6.0.0-BETA1, <6.4.41
>=7.0.0-BETA1, <7.4.13
>=8.0.0-BETA1, <8.0.13