Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Missing Authorization
CVE-2026-49274
Affects
getkirby/cms
| Versions
<4.9.4
>=5.0.0-alpha.1, <5.4.4
M
Cross-site Scripting (XSS)
CVE-2026-55409
Affects
filament/forms
| Versions
>=3.0.0, <3.3.53
M
Missing Authorization
CVE-2026-48500
Affects
filament/filament
| Versions
>=3.0.0, <3.3.52
>=4.0.0, <4.11.5
>=5.0.0, <5.6.5
M
Timing Attack
CVE-2026-48166
Affects
filament/filament
| Versions
>=4.0.0, <4.11.5
>=5.0.0, <5.6.5
M
Cross-site Scripting (XSS)
CVE-2026-47344
Affects
typo3/html-sanitizer
| Versions
<2.3.2
M
Cross-site Scripting (XSS)
CVE-2026-47345
Affects
typo3/html-sanitizer
| Versions
<2.3.2
C
Improper Enforcement of Behavioral Workflow
CVE-2026-48505
Affects
filament/filament
| Versions
>=4.0.0, <4.11.5
>=5.0.0, <5.6.5
H
Authorization Bypass Through User-Controlled Key
CVE-2026-48067
Affects
filament/tables
| Versions
>=3.0.0, <3.3.51
H
Authorization Bypass Through User-Controlled Key
CVE-2026-48067
Affects
filament/query-builder
| Versions
>=4.0.0, <4.11.4
>=5.0.0, <5.6.4
H
Authorization Bypass Through User-Controlled Key
CVE-2026-48067
Affects
filament/forms
| Versions
>=4.0.0, <4.11.4
>=5.0.0, <5.6.4
H
Authorization Bypass Through User-Controlled Key
CVE-2026-48067
Affects
filament/actions
| Versions
>=4.0.0, <4.11.4
>=5.0.0, <5.6.4
M
PHP Remote File Inclusion
CVE-2026-48820
Affects
cakephp/cakephp
| Versions
<4.5.11
>=4.6.0, <4.6.4
>=5.0.0, <5.1.7
>=5.2.0, <5.2.13
>=5.3.0, <5.3.6
M
Cross-site Scripting (XSS)
CVE-2026-48167
Affects
filament/infolists
| Versions
>=4.0.0, <4.11.5
>=5.0.0, <5.6.5
M
Cross-site Scripting (XSS)
CVE-2026-48167
Affects
filament/tables
| Versions
>=4.0.0, <4.11.5
>=5.0.0, <5.6.5
M
Cross-site Request Forgery (CSRF)
Affects
silverstripe/forum
| Versions
<0.6.2
>=0.7.0, <0.7.4
H
Allocation of Resources Without Limits or Throttling
Affects
web-token/jwt-library
| Versions
<3.4.10
>=4.0.0, <4.0.7
>=4.1.0, <4.1.7
C
Improper Verification of Cryptographic Signature
Affects
web-token/jwt-experimental
| Versions
<3.4.10
>=4.0.0, <4.0.7
>=4.1.0, <4.1.7
H
Improper Verification of Cryptographic Signature
Affects
web-token/jwt-library
| Versions
<3.4.10
>=4.0.0, <4.0.7
>=4.1.0, <4.1.7
H
Timing Attack
Affects
web-token/jwt-library
| Versions
<3.4.10
>=4.0.0, <4.0.7
>=4.1.0, <4.1.7
H
Timing Attack
Affects
web-token/jwt-framework
| Versions
<3.4.10
>=4.0.0, <4.0.7
>=4.1.0, <4.1.7
C
Deserialization of Untrusted Data
CVE-2026-49286
Affects
pontedilana/php-weasyprint
| Versions
<2.6.0
C
Deserialization of Untrusted Data
CVE-2026-45034
Affects
phpoffice/phpspreadsheet
| Versions
<1.30.5
>=2.0.0, <2.1.17
>=2.2.0, <2.4.6
>=3.3.0, <3.10.6
>=4.0.0, <5.8.0
M
Server-side Request Forgery (SSRF)
CVE-2026-55599
Affects
phpseclib/phpseclib
| Versions
>=0.1.1, <1.0.30
>=2.0.0, <2.0.55
>=3.0.0, <3.0.54
M
Cross-site Scripting (XSS)
Affects
silverstripe/cms
| Versions
>=3.1.0, <3.1.10-rc1
M
Server-side Request Forgery (SSRF)
CVE-2026-49359
Affects
pontedilana/php-weasyprint
| Versions
<2.6.0
H
Command Injection
CVE-2026-49260
Affects
pontedilana/php-weasyprint
| Versions
<2.5.1
M
Cross-site Scripting (XSS)
Affects
silverstripe/cms
| Versions
>=3.1.0, <3.1.10-rc1
H
Directory Traversal
CVE-2026-9506
Affects
bagisto/bagisto
| Versions
<2.4.2
H
XML Injection
CVE-2026-53723
Affects
guzzlehttp/guzzle-services
| Versions
<1.5.4
H
Missing Encryption of Sensitive Data
CVE-2026-55568
Affects
guzzlehttp/guzzle
| Versions
<7.12.1