Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Deserialization of Untrusted Data
CVE-2026-44167
Affects
phpseclib/phpseclib
| Versions
>=0.0.11, <1.0.29
>=2.0.0, <2.0.54
>=3.0.0, <3.0.52
M
Open Redirect
CVE-2026-42207
Affects
openmage/magento-lts
| Versions
<20.18.0
M
Server-side Request Forgery (SSRF)
CVE-2026-42194
Affects
admidio/admidio
| Versions
<5.0.9
M
CSV Injection
CVE-2026-42267
Affects
kimai/kimai
| Versions
>=2.27.0, <2.54.0
C
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2026-42155
Affects
openmage/magento-lts
| Versions
<20.18.0
H
Arbitrary Code Injection
CVE-2026-42607
Affects
getgrav/grav
| Versions
<2.0.0-beta.2
H
Incorrect Authorization
CVE-2026-42610
Affects
getgrav/grav
| Versions
<2.0.0-beta.2
M
Cross-site Scripting (XSS)
CVE-2026-42841
Affects
getgrav/grav
| Versions
<2.0.0-beta.2
C
Deserialization of Untrusted Data
CVE-2026-56700
Affects
getgrav/grav
| Versions
<2.0.0-beta.2
H
Cross-site Scripting (XSS)
CVE-2026-42612
Affects
getgrav/grav
| Versions
<2.0.0-beta.2
H
Deserialization of Untrusted Data
CVE-2026-7317
Affects
getgrav/grav
| Versions
<2.0.0-beta.2
C
Directory Traversal
CVE-2026-42608
Affects
getgrav/grav
| Versions
<2.0.0-beta.2
M
Cross-site Scripting (XSS)
CVE-2026-42842
Affects
getgrav/grav
| Versions
<2.0.0-beta.2
H
XML External Entity (XXE) Injection
CVE-2026-56701
Affects
getgrav/grav
| Versions
<2.0.0-beta.2
C
Improper Input Validation
CVE-2026-42613
Affects
getgrav/grav
| Versions
<2.0.0-beta.2
H
Cross-site Scripting (XSS)
CVE-2026-42611
Affects
getgrav/grav
| Versions
<2.0.0-beta.2
H
Improper Enforcement of a Single, Unique Action
CVE-2026-42609
Affects
getgrav/grav
| Versions
<2.0.0-beta.2
C
Directory Traversal
CVE-2026-42608
Affects
getgrav/grav
| Versions
<2.0.0-beta.2
L
Authorization Bypass Through User-Controlled Key
CVE-2026-43883
Affects
wwbn/avideo
| Versions
>=0.0.0
H
Server-side Request Forgery (SSRF)
CVE-2026-43884
Affects
wwbn/avideo
| Versions
>=0.0.0
M
Missing Authentication for Critical Function
CVE-2026-43881
Affects
wwbn/avideo
| Versions
>=0.0.0
H
Missing Authorization
CVE-2026-43885
Affects
wwbn/avideo
| Versions
>=0.0.0
M
CRLF Injection
CVE-2026-43882
Affects
wwbn/avideo
| Versions
>=0.0.0
M
Server-side Request Forgery (SSRF)
CVE-2026-43879
Affects
wwbn/avideo
| Versions
>=0.0.0
M
Improper Verification of Source of a Communication Channel
CVE-2026-43880
Affects
wwbn/avideo
| Versions
>=0.0.0
M
Arbitrary Code Injection
CVE-2026-43874
Affects
wwbn/avideo
| Versions
>=0.0.0
M
Cross-site Scripting (XSS)
CVE-2026-43876
Affects
wwbn/avideo
| Versions
>=0.0.0
H
Use of GET Request Method With Sensitive Query Strings
CVE-2026-43875
Affects
wwbn/avideo
| Versions
>=0.0.0
M
Cross-site Scripting (XSS)
CVE-2026-43878
Affects
wwbn/avideo
| Versions
>=0.0.0
M
Cross-site Request Forgery (CSRF)
CVE-2026-43877
Affects
wwbn/avideo
| Versions
>=0.0.0