Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Missing Authorization
CVE-2026-64662
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-64663
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
C
User Impersonation
CVE-2026-64665
Affects
statamic/cms
| Versions
<5.74.1
>=6.0.0, <6.24.0
M
Exposure of Resource to Wrong Sphere
CVE-2026-72782
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.2
>=5.0.0-RC1, <5.10.6
M
Cross-site Scripting (XSS)
CVE-2026-72787
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.10.8
M
Missing Authorization
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.1
>=5.0.0-RC1, <5.10.3
M
Incomplete List of Disallowed Inputs
CVE-2026-72779
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.2
>=5.0.0-RC1, <5.10.6
H
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-72778
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.2
>=5.0.0-RC1, <5.10.6
M
Missing Authorization
CVE-2026-14793
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.10.3
>=4.0.0-RC1, <4.18.1
M
Improper Authorization
CVE-2026-72786
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.10.8
H
Protection Mechanism Failure
CVE-2026-72781
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.3
>=5.0.0-RC1, <5.10.7
L
Directory Traversal
CVE-2026-72783
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.18.2
>=5.0.0-RC1, <5.10.6
C
Replay Attack
CVE-2026-72780
Affects
craftcms/cms
| Versions
>=5.0.0-RC1, <5.10.5
M
Incorrect Authorization
CVE-2026-72785
Affects
craftcms/cms
| Versions
<4.18.2
>=5.0.0-RC1, <5.10.6
C
Command Injection
CVE-2026-67434
Affects
squizlabs/php_codesniffer
| Versions
<3.13.6
>=4.0.0, <4.0.2
M
Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-69246
Affects
guzzlehttp/guzzle
| Versions
<7.15.2
>=8.0.0, <8.0.1
M
Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-69245
Affects
guzzlehttp/guzzle
| Versions
<7.15.2
>=8.0.0, <8.0.1
C
Resources Downloaded over Insecure Protocol
CVE-2026-66398
Affects
thorsten/phpmyfaq
| Versions
<4.1.6
C
Resources Downloaded over Insecure Protocol
CVE-2026-66398
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.6
H
Directory Traversal
CVE-2026-66397
Affects
thorsten/phpmyfaq
| Versions
<4.1.6
H
Directory Traversal
CVE-2026-66397
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.6
M
Cross-site Scripting (XSS)
CVE-2026-14856
Affects
tastyigniter/tastyigniter
| Versions
>=4.3.0
H
Directory Traversal
CVE-2026-58341
Affects
moodle/moodle
| Versions
>=4.5.0, <4.5.12
>=5.0.0, <5.0.8
>=5.1.0, <5.1.5
>=5.2.0, <5.2.1
H
Eval Injection
CVE-2026-45293
Affects
wp-coding-standards/wpcs
| Versions
>=0.14.1, <3.4.1
C
Malicious Package
CVE-2026-67595
Affects
webreinvent/vaahcms
| Versions
>=2.0.0
H
Authorization Bypass Through User-Controlled Key
CVE-2026-66412
Affects
leantime/leantime
| Versions
>=0.0.0
H
Cross-site Request Forgery (CSRF)
CVE-2026-66416
Affects
leantime/leantime
| Versions
>=0.0.0
H
Server-side Request Forgery (SSRF)
CVE-2026-66415
Affects
leantime/leantime
| Versions
>=0.0.0
M
Open Redirect
CVE-2026-66414
Affects
leantime/leantime
| Versions
>=0.0.0
H
Directory Traversal
CVE-2026-63222
Affects
codeigniter4/framework
| Versions
<4.7.4