Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Command Injection
CVE-2026-53932
Affects
wnx/laravel-backup-restore
| Versions
<1.9.4
H
SQL Injection
CVE-2026-52770
Affects
yeswiki/yeswiki
| Versions
<4.6.6
H
Improper Verification of Cryptographic Signature
CVE-2026-52767
Affects
yeswiki/yeswiki
| Versions
>=4.6.2, <4.6.6
C
Deserialization of Untrusted Data
CVE-2026-52777
Affects
yeswiki/yeswiki
| Versions
<4.6.6
H
SQL Injection
CVE-2026-52771
Affects
yeswiki/yeswiki
| Versions
>=4.2.0, <4.6.6
H
Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-52762
Affects
yeswiki/yeswiki
| Versions
<4.6.6
M
Server-side Request Forgery (SSRF)
CVE-2026-52769
Affects
yeswiki/yeswiki
| Versions
>=4.6.2, <4.6.6
H
Missing Authorization
CVE-2026-52766
Affects
yeswiki/yeswiki
| Versions
<4.6.6
H
SQL Injection
CVE-2026-52775
Affects
yeswiki/yeswiki
| Versions
<4.6.6
M
Cross-site Scripting (XSS)
CVE-2026-52774
Affects
yeswiki/yeswiki
| Versions
<4.6.6
M
Cross-site Scripting (XSS)
CVE-2026-52773
Affects
yeswiki/yeswiki
| Versions
<4.6.6
H
Improper Validation of Specified Type of Input
CVE-2026-52763
Affects
yeswiki/yeswiki
| Versions
<4.6.6
M
Improper Encoding or Escaping of Output
CVE-2026-52772
Affects
yeswiki/yeswiki
| Versions
<4.6.6
L
Directory Traversal
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.17.7
>=5.0.0-RC1, <5.9.13
M
Cross-site Request Forgery (CSRF)
CVE-2026-53760
Affects
admidio/admidio
| Versions
>=0.0.0
H
Arbitrary Code Injection
CVE-2026-56382
Affects
craftcms/cms
| Versions
>=5.5.0, <5.9.14
H
Directory Traversal
CVE-2026-59948
Affects
composer/composer
| Versions
<2.2.29
>=2.3.0-RC1, <2.10.2
M
Insertion of Sensitive Information into Log File
CVE-2026-59947
Affects
composer/composer
| Versions
<2.2.29
>=2.3.0-RC1, <2.10.2
H
Directory Traversal
CVE-2026-59946
Affects
composer/composer
| Versions
<2.2.29
>=2.3.0-RC1, <2.10.2
H
Command Injection
CVE-2026-60102
Affects
horde/vfs
| Versions
<3.0.1
L
Interpretation Conflict
CVE-2026-59882
Affects
guzzlehttp/psr7
| Versions
<2.12.3
L
Origin Validation Error
CVE-2026-59883
Affects
guzzlehttp/guzzle
| Versions
<7.12.3
M
Cross-site Scripting (XSS)
CVE-2026-58657
Affects
getgrav/grav
| Versions
>=2.0.0-rc.9, <2.0.0
M
Information Exposure
Affects
web-auth/webauthn-lib
| Versions
>=4.9.0, <5.3.5
L
External Control of File Name or Path
CVE-2026-49358
Affects
pontedilana/php-weasyprint
| Versions
<2.6.0
C
Authorization Bypass Through User-Controlled Key
CVE-2026-27823
Affects
egroupware/egroupware
| Versions
<23.1.20260224
>=26.0.20251208, <26.2.20260224
H
Eval Injection
CVE-2026-40187
Affects
egroupware/egroupware
| Versions
<23.1.20260601
>=26.0.20251208, <26.4.20260413
H
External Control of File Name or Path
CVE-2026-45016
Affects
egroupware/egroupware
| Versions
<23.1.20260601
>=26.0.20251208, <26.5.20260507
H
Authorization Bypass Through User-Controlled Key
CVE-2026-59712
Affects
leantime/leantime
| Versions
<3.9.6
H
Cross-site Request Forgery (CSRF)
CVE-2026-59713
Affects
leantime/leantime
| Versions
<3.8.0