Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
L
Quadratic Blowup Attack
Affects
silverstripe/framework
| Versions
<3.1.12
M
Improper Access Control
CVE-2023-44401
Affects
silverstripe/graphql
| Versions
>=4.0.0, <4.3.7
>=5.0.0, <5.1.3
H
Uncontrolled Resource Consumption ('Resource Exhaustion')
CVE-2023-40180
Affects
silverstripe/graphql
| Versions
>=3.0.0, <3.8.2
>=4.0.0, <4.1.3
>=4.2.0, <4.2.5
>=4.3.0, <4.3.4
>=5.0.0, <5.0.3
H
Denial of Service (DoS)
CVE-2023-28104
Affects
silverstripe/graphql
| Versions
>=4.1.1, <4.1.2
>=4.2.2, <4.2.3
H
Improper Access Control
CVE-2021-28661
Affects
silverstripe/graphql
| Versions
>=3.0.0, <3.5.2
M
Access Restriction Bypass
CVE-2020-26136
Affects
silverstripe/graphql
| Versions
>=3.0.0, <3.5.0
>=4.0.0-alpha1, <4.0.0-alpha2
M
Improper Input Validation
CVE-2020-6165
Affects
silverstripe/graphql
| Versions
>=3.2.0, <3.2.4
M
Cross-site Request Forgery (CSRF)
CVE-2019-12437
Affects
silverstripe/graphql
| Versions
>=3.0.0, <3.1.0
>=2.0.0, <2.0.5
H
Cross-site Request Forgery (CSRF)
Affects
silverstripe/graphql
| Versions
>=2.0.0, <2.0.3
M
Insufficient Session Expiration
CVE-2022-24444
Affects
silverstripe/hybridsessions
| Versions
<2.4.1
>=2.5.0, <2.5.1
H
Remote Code Execution (RCE)
CVE-2020-9309
Affects
silverstripe/recipe-core
| Versions
>=4.0.0, <4.6.0
H
SQL Injection
CVE-2019-12149
Affects
silverstripe/registry
| Versions
>=2.1.0, <2.1.1
>=2.2.0, <2.2.1
M
Incorrect Authorization
CVE-2024-29885
Affects
silverstripe/reports
| Versions
<5.2.3
H
SQL Injection
CVE-2019-12149
Affects
silverstripe/restfulserver
| Versions
>=1.0.0, <1.0.9
>=2.0.0, <2.0.4
>=2.1.0, <2.1.2
L
Incomplete Model of Endpoint Features
CVE-2022-29254
Affects
silverstripe/silverstripe-omnipay
| Versions
<2.5.2
>=3.0.0, <3.0.2
>=3.1.0, <3.1.4
>=3.2.0, <3.2.1
M
Insecure Permissions
CVE-2022-42949
Affects
silverstripe/subsites
| Versions
<2.6.1
>=2.7.0-beta1, <2.7.0
H
SQL Injection
Affects
silverstripe/subsites
| Versions
>=2.0.0, <2.1.1
H
SQL Injection
Affects
silverstripe/taxonomy
| Versions
>=1.3.0, <1.3.1
>=2.0.0, <2.0.1
H
Arbitrary Code Injection
CVE-2026-54721
Affects
silverstripe/userforms
| Versions
<6.4.9
>=7.0.0, <7.0.7
>=7.1.0, <7.1.1
M
Information Exposure
CVE-2020-9280
Affects
silverstripe/userforms
| Versions
<5.4.2
>=5.5.0, <5.5.2
M
Arbitrary File Upload
Affects
silverstripe/userforms
| Versions
<3.0.0
M
Cross-site Scripting (XSS)
CVE-2026-55779
Affects
silverstripe/versioned
| Versions
<3.2.1
M
Cross-site Scripting (XSS)
CVE-2022-38145
Affects
silverstripe/versioned-admin
| Versions
>=1.0.0, <1.11.1
H
Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-54718
Affects
symbiote/silverstripe-advancedworkflow
| Versions
<6.4.5
>=7.0.0, <7.1.3
>=7.2.0, <7.2.1
M
PHP Object Injection
Affects
symbiote/silverstripe-multivaluefield
| Versions
>=3.0.0, <3.1.0
L
Cross-site Scripting (XSS)
CVE-2021-27938
Affects
symbiote/silverstripe-queuedjobs
| Versions
>=3.0.0, <3.0.2
>=3.1.0, <3.1.4
>=4.0.0, <4.0.7
>=4.1.0, <4.1.2
>=4.2.0, <4.2.4
>=4.3.0, <4.3.3
>=4.4.0, <4.4.3
>=4.5.0, <4.5.1
>=4.6.0, <4.6.4
M
Open Redirect
CVE-2017-20164
Affects
symbiote/silverstripe-seed
| Versions
<6.0.3
M
Information Exposure
CVE-2019-16409
Affects
symbiote/silverstripe-versionedfiles
| Versions
>0.0.0
M
SQL Injection
CVE-2015-10077
Affects
webbuilders-group/silverstripe-kapost-bridge
| Versions
<0.4.0