Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Cross-site Scripting (XSS)
Affects
silverstripe/cms
| Versions
<3.1.10
M
Cross-site Scripting (XSS)
Affects
silverstripe/cms
| Versions
<3.1.10
M
Cross-site Scripting (XSS)
Affects
silverstripe/comments
| Versions
>=1.3.0, <3.1.1
M
Cross-site Request Forgery (CSRF)
Affects
silverstripe/forum
| Versions
<0.6.2
>=0.7.0, <0.7.4
M
Cross-site Request Forgery (CSRF)
Affects
silverstripe/forum
| Versions
<0.6.2
>=0.7.0, <0.7.4
M
Cross-site Scripting (XSS)
CVE-2026-54720
Affects
silverstripe/framework
| Versions
<6.2.2
H
HTTP Request Smuggling
Affects
silverstripe/framework
| Versions
>=3.0.0, <3.0.14
>=3.1.0, <3.1.13
M
Open Redirect
Affects
silverstripe/framework
| Versions
>=3.0.0, <3.0.14
>=3.1.0, <3.1.13
M
Cross-site Scripting (XSS)
Affects
silverstripe/framework
| Versions
>=3.1.0, <3.1.10-rc1
M
Cross-site Scripting (XSS)
Affects
silverstripe/framework
| Versions
>=3.1.0, <3.1.10-rc1
M
Incorrect Authorization
Affects
silverstripe/framework
| Versions
>=3.0.0, <3.0.14
>=3.1.0, <3.1.13
M
Cross-site Request Forgery (CSRF)
Affects
silverstripe/framework
| Versions
<3.1.17-rc2
>=3.2.0-beta1, <3.2.2-rc2
>3.3.0-beta1, <3.3.0-rc3
H
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affects
silverstripe/framework
| Versions
<3.1.12
M
Missing Authorization
Affects
silverstripe/framework
| Versions
<3.1.17-rc2
>=3.2.0-beta1, <3.2.2
>3.3.0-beta1, <3.3.0-rc3
L
Cross-site Scripting (XSS)
Affects
silverstripe/framework
| Versions
<3.0.13
>=3.1.0, <3.1.12
M
User Impersonation
Affects
silverstripe/framework
| Versions
>=3.1.0, <3.1.17-rc2
>=3.2.0, <3.2.2-rc2
>=3.3.0-beta1, <3.3.0-rc3
M
Observable Discrepancy
Affects
silverstripe/framework
| Versions
>=4.0.0, <5.3.23
M
Cross-site Scripting (XSS)
CVE-2025-30148
Affects
silverstripe/framework
| Versions
<5.3.23
M
Cross-site Scripting (XSS)
CVE-2024-53277
Affects
silverstripe/framework
| Versions
<5.3.8
M
Cross-site Scripting (XSS)
Affects
silverstripe/framework
| Versions
<5.3.8
M
Cross-site Scripting (XSS)
CVE-2024-47605
Affects
silverstripe/framework
| Versions
<5.3.8
M
Cross-site Scripting (XSS)
CVE-2024-32981
Affects
silverstripe/framework
| Versions
<5.2.16
H
SQL Injection
Affects
silverstripe/framework
| Versions
>=4.0.0-rc1, <4.0.6
>=4.1.0-rc1, <4.1.4
>=4.2.0-rc1, <4.2.3
M
Information Exposure Through an Error Message
Affects
silverstripe/framework
| Versions
>=3.7.0-rc1, <3.7.1
>=4.0.0-rc1, <4.0.5
>=4.1.0-rc1, <4.1.3
>=4.2.0-rc1, <4.2.2
L
Information Exposure
Affects
silverstripe/framework
| Versions
>=3.5.5-rc1, <3.7.0
>=4.0.3-rc1, <4.0.4
>=4.1.0-rc1, <4.1.1
H
Unrestricted Upload of File with Dangerous Type
Affects
silverstripe/framework
| Versions
>=3.6.5-rc1, <3.6.6
>=4.0.3-rc1, <4.0.4
>=4.1.0-rc1, <4.1.1
M
Information Exposure
Affects
silverstripe/framework
| Versions
>=4.0.0-rc1, <4.0.4
>=4.1.0rc1, <4.1.1
H
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Affects
silverstripe/framework
| Versions
>=4.0.3-rc1, <4.0.4
>=4.1.0-rc1, <4.1.1
H
URL Redirection to Untrusted Site ('Open Redirect')
Affects
silverstripe/framework
| Versions
>=4.0.0-rc1, <4.0.4
>=4.1.0-rc1, <4.1.1
M
Privilege Escalation
Affects
silverstripe/framework
| Versions
>=3.5.7-rc1, <3.5.8
>=3.6.0-rc1, <3.6.6
>=4.0.0-rc1, <4.0.4
>=4.1.0-rc1, <4.1.1