Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Cross-site Scripting (XSS)
CVE-2026-61456
Affects
getgrav/grav
| Versions
<1.0.3
M
Incorrect Authorization
CVE-2026-53638
Affects
sylius/sylius
| Versions
>=2.0.0, <2.0.18
>=2.1.0, <2.1.15
>=2.2.0, <2.2.6
M
Authorization Bypass Through User-Controlled Key
CVE-2026-53639
Affects
sylius/sylius
| Versions
>=2.0.0, <2.0.18
>=2.1.0, <2.1.15
>=2.2.0, <2.2.6
H
Improper Enforcement of Behavioral Workflow
CVE-2026-53637
Affects
sylius/sylius
| Versions
>=2.0.0, <2.0.18
>=2.1.0, <2.1.15
>=2.2.0, <2.2.6
H
Cross-site Request Forgery (CSRF)
CVE-2026-58143
Affects
cotonti/cotonti
| Versions
>=0.0.0
M
Cross-site Scripting (XSS)
CVE-2026-58144
Affects
cotonti/cotonti
| Versions
>=0.0.0
H
SQL Injection
CVE-2026-55208
Affects
pimcore/studio-backend-bundle
| Versions
<2025.4.6
>=2026.1.0, <2026.1.6
H
Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-55207
Affects
pimcore/studio-backend-bundle
| Versions
<2025.4.6
>=2026.1.0, <2026.1.6
H
Improper Authorization
CVE-2026-55212
Affects
pimcore/studio-backend-bundle
| Versions
<2025.4.6
>=2026.1.0, <2026.1.6
H
Command Injection
CVE-2026-53932
Affects
wnx/laravel-backup-restore
| Versions
<1.9.4
H
SQL Injection
CVE-2026-52770
Affects
yeswiki/yeswiki
| Versions
<4.6.6
H
Improper Verification of Cryptographic Signature
CVE-2026-52767
Affects
yeswiki/yeswiki
| Versions
>=4.6.2, <4.6.6
C
Deserialization of Untrusted Data
CVE-2026-52777
Affects
yeswiki/yeswiki
| Versions
<4.6.6
H
SQL Injection
CVE-2026-52771
Affects
yeswiki/yeswiki
| Versions
>=4.2.0, <4.6.6
H
Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-52762
Affects
yeswiki/yeswiki
| Versions
<4.6.6
M
Server-side Request Forgery (SSRF)
CVE-2026-52769
Affects
yeswiki/yeswiki
| Versions
>=4.6.2, <4.6.6
H
Missing Authorization
CVE-2026-52766
Affects
yeswiki/yeswiki
| Versions
<4.6.6
H
SQL Injection
CVE-2026-52775
Affects
yeswiki/yeswiki
| Versions
<4.6.6
M
Cross-site Scripting (XSS)
CVE-2026-52774
Affects
yeswiki/yeswiki
| Versions
<4.6.6
M
Cross-site Scripting (XSS)
CVE-2026-52773
Affects
yeswiki/yeswiki
| Versions
<4.6.6
H
Improper Validation of Specified Type of Input
CVE-2026-52763
Affects
yeswiki/yeswiki
| Versions
<4.6.6
M
Improper Encoding or Escaping of Output
CVE-2026-52772
Affects
yeswiki/yeswiki
| Versions
<4.6.6
L
Directory Traversal
Affects
craftcms/cms
| Versions
>=4.0.0-RC1, <4.17.7
>=5.0.0-RC1, <5.9.13
M
Cross-site Request Forgery (CSRF)
CVE-2026-53760
Affects
admidio/admidio
| Versions
>=0.0.0
H
Arbitrary Code Injection
Affects
craftcms/cms
| Versions
>=5.5.0, <5.9.14
H
Directory Traversal
CVE-2026-59948
Affects
composer/composer
| Versions
<2.2.29
>=2.3.0-RC1, <2.10.2
M
Insertion of Sensitive Information into Log File
CVE-2026-59947
Affects
composer/composer
| Versions
<2.2.29
>=2.3.0-RC1, <2.10.2
H
Directory Traversal
CVE-2026-59946
Affects
composer/composer
| Versions
<2.2.29
>=2.3.0-RC1, <2.10.2
H
Command Injection
CVE-2026-60102
Affects
horde/vfs
| Versions
<3.0.1
L
Interpretation Conflict
CVE-2026-59882
Affects
guzzlehttp/psr7
| Versions
<2.12.3