Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Information Exposure
CVE-2026-59943
Affects
dompdf/dompdf
| Versions
<3.1.6
M
Directory Traversal
CVE-2026-56722
Affects
dompdf/dompdf
| Versions
<3.1.6
M
Directory Traversal
CVE-2026-55554
Affects
dompdf/dompdf
| Versions
<3.1.6
M
Information Exposure
CVE-2026-55555
Affects
dompdf/dompdf
| Versions
<3.1.6
H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-65608
Affects
getgrav/grav
| Versions
>=1.7.0, <2.0.9
C
Arbitrary Code Injection
CVE-2026-65008
Affects
getgrav/grav
| Versions
<2.0.7
M
Incorrect Implementation of Authentication Algorithm
CVE-2026-57852
Affects
getgrav/grav
| Versions
<2.0.9
M
Improperly Controlled Sequential Memory Allocation
CVE-2026-67353
Affects
guzzlehttp/guzzle
| Versions
<7.15.1
H
Incorrectly Specified Destination in a Communication Channel
CVE-2026-67355
Affects
guzzlehttp/guzzle
| Versions
<7.15.1
H
Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-67354
Affects
guzzlehttp/guzzle
| Versions
<7.15.1
M
Insufficiently Protected Credentials
CVE-2026-67339
Affects
guzzlehttp/guzzle
| Versions
<7.14.2
H
Directory Traversal
CVE-2026-65694
Affects
microweber/microweber
| Versions
>=0.0.0
M
Allocation of Resources Without Limits or Throttling
CVE-2026-65650
Affects
elgg/elgg
| Versions
<7.0.0
H
HTTP Response Splitting
CVE-2026-63771
Affects
vrana/adminer
| Versions
>=4.6.0, <5.4.3
C
Remote Code Execution (RCE)
CVE-2026-63030
Affects
johnpbloch/wordpress-core
| Versions
>=6.9.0, <6.9.5
>=7.0.0, <7.0.2
H
SQL Injection
CVE-2026-60137
Affects
johnpbloch/wordpress-core
| Versions
>=6.8.0, <6.8.6
>=6.9.0, <6.9.5
>=7.0.0, <7.0.2
M
Missing Authorization
Affects
verbb/formie
| Versions
<3.1.28
H
Command Injection
CVE-2026-55578
Affects
pheditor/pheditor
| Versions
>=2.0.1, <2.0.6
H
Command Injection
CVE-2026-54540
Affects
pheditor/pheditor
| Versions
<2.0.5
C
Use of Hard-coded Credentials
CVE-2026-55579
Affects
pheditor/pheditor
| Versions
>=2.0.1, <2.0.6
C
Missing Authorization
CVE-2026-62232
Affects
getgrav/grav
| Versions
>=2.0.3, <2.0.4
H
Improper Handling of Case Sensitivity
CVE-2026-62230
Affects
getgrav/grav
| Versions
<2.0.4
H
Regular Expression Denial of Service (ReDoS)
CVE-2026-62237
Affects
getgrav/grav
| Versions
<2.0.4
H
Improper Handling of Highly Compressed Data (Data Amplification)
Affects
adawolfa/isdoc
| Versions
<1.3.7
>=1.4.0, <1.4.3
>=1.5.0, <1.5.1
>=1.6.0, <1.6.1
H
Improper Privilege Management
CVE-2026-57996
Affects
thorsten/phpmyfaq
| Versions
<4.1.5
H
Improper Privilege Management
CVE-2026-57996
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.5
M
Insufficient Session Expiration
CVE-2026-61452
Affects
getgrav/grav
| Versions
<2.0.4
M
Cross-site Scripting (XSS)
CVE-2026-61453
Affects
getgrav/grav
| Versions
<2.0.1
H
Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-61449
Affects
getgrav/grav
| Versions
<2.0.2
H
Server-side Request Forgery (SSRF)
CVE-2026-54493
Affects
phanan/koel
| Versions
<9.7.0