Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Uncaught ExceptionCVE-2026-34986
Affects github.com/go-jose/go-jose/v4/cipher | Versions <4.1.4
Has fix
GoPublished 3 Apr 2026
  • H
Uncaught ExceptionCVE-2026-34986
Affects github.com/go-jose/go-jose/v3/cipher | Versions <3.0.5
Has fix
GoPublished 3 Apr 2026
  • H
Uncaught ExceptionCVE-2026-34986
Affects github.com/go-jose/go-jose/cipher | Versions <3.0.5>=4.0.0 <4.1.4
Has fix
GoPublished 3 Apr 2026
  • H
Uncaught ExceptionCVE-2026-34986
Affects github.com/go-jose/go-jose/v4 | Versions <4.1.4
Has fix
GoPublished 3 Apr 2026
  • H
Uncaught ExceptionCVE-2026-34986
Affects github.com/go-jose/go-jose/v3 | Versions <3.0.5
Has fix
GoPublished 3 Apr 2026
  • H
Uncaught ExceptionCVE-2026-34986
Affects github.com/go-jose/go-jose | Versions <3.0.5>=4.0.0 <4.1.4
Has fix
GoPublished 3 Apr 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-28375
Affects github.com/grafana/grafana/pkg/tsdb | Versions >=8.1.0 <11.6.4>=12.0.0 <12.1.10>=12.2.0 <12.2.8>=12.3.0 <12.3.6>=12.4.0 <12.4.2
Has fix
GoPublished 2 Apr 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-27880
Affects github.com/grafana/grafana/pkg/registry/apis/ofrep | Versions >=12.1.0 <12.1.10>=12.2.0 <12.2.8>=12.3.0 <12.3.6>=12.4.0 <12.4.2
Has fix
GoPublished 2 Apr 2026
  • M
SQL InjectionCVE-2026-27876
Affects github.com/grafana/grafana/pkg/expr/sql | Versions >=11.6.0 <11.6.4>=12.0.0 <12.1.10>=12.2.0 <12.2.8>=12.3.0 <12.3.6>=12.4.0 <12.4.2
Has fix
GoPublished 2 Apr 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-27879
Affects github.com/grafana/grafana/pkg/expr/mathexp | Versions >=8.0.0 <11.6.4>=12.0.0 <12.1.10>=12.2.0 <12.2.8>=12.3.0 <12.3.6>=12.4.0 <12.4.2
Has fix
GoPublished 2 Apr 2026
  • H
Exposure of Private Personal Information to an Unauthorized ActorCVE-2026-27877
Affects github.com/grafana/grafana/pkg/api | Versions >=9.3.0 <11.6.4>=12.0.0 <12.1.10>=12.2.0 <12.2.8>=12.3.0 <12.3.6>=12.4.0 <12.4.2
Has fix
GoPublished 2 Apr 2026
  • H
SQL InjectionCVE-2026-34386
Affects github.com/fleetdm/fleet/server/datastore/mysql | Versions <4.81.0
Has fix
GoPublished 2 Apr 2026
  • H
SQL InjectionCVE-2026-34386
Affects github.com/fleetdm/fleet/v4/server/datastore/mysql | Versions <4.81.0
Has fix
GoPublished 2 Apr 2026
  • M
Exposure of Data Element to Wrong SessionCVE-2026-34391
Affects github.com/fleetdm/fleet/server/service | Versions <4.81.1
Has fix
GoPublished 2 Apr 2026
  • M
Exposure of Data Element to Wrong SessionCVE-2026-34391
Affects github.com/fleetdm/fleet/v4/server/service | Versions <4.81.1
Has fix
GoPublished 2 Apr 2026
  • M
Exposure of Data Element to Wrong SessionCVE-2026-34391
Affects github.com/fleetdm/fleet/server/mdm/microsoft | Versions <4.81.1
Has fix
GoPublished 2 Apr 2026
  • M
Exposure of Data Element to Wrong SessionCVE-2026-34391
Affects github.com/fleetdm/fleet/v4/server/mdm/microsoft | Versions <4.81.1
Has fix
GoPublished 2 Apr 2026
  • M
Exposure of Data Element to Wrong SessionCVE-2026-34391
Affects github.com/fleetdm/fleet/server/fleet | Versions <4.81.1
Has fix
GoPublished 2 Apr 2026
  • M
Exposure of Data Element to Wrong SessionCVE-2026-34391
Affects github.com/fleetdm/fleet/v4/server/fleet | Versions <4.81.1
Has fix
GoPublished 2 Apr 2026
  • M
Exposure of Data Element to Wrong SessionCVE-2026-34391
Affects github.com/fleetdm/fleet/server/datastore/mysql | Versions <4.81.1
Has fix
GoPublished 2 Apr 2026
  • M
Exposure of Data Element to Wrong SessionCVE-2026-34391
Affects github.com/fleetdm/fleet/v4/server/datastore/mysql | Versions <4.81.1
Has fix
GoPublished 2 Apr 2026
  • M
Exposure of Data Element to Wrong SessionCVE-2026-34391
Affects github.com/fleetdm/fleet/pkg/mdm/mdmtest | Versions <4.81.1
Has fix
GoPublished 2 Apr 2026
  • M
Exposure of Data Element to Wrong SessionCVE-2026-34391
Affects github.com/fleetdm/fleet/v4/pkg/mdm/mdmtest | Versions <4.81.1
Has fix
GoPublished 2 Apr 2026
  • H
Insecure Default Initialization of ResourceCVE-2026-34742
Affects github.com/modelcontextprotocol/go-sdk/mcp | Versions <1.4.0
Has fix
GoPublished 2 Apr 2026
  • H
Insecure Default Initialization of ResourceCVE-2026-34742
Affects github.com/modelcontextprotocol/go-sdk/internal/util | Versions <1.4.0
Has fix
GoPublished 2 Apr 2026
  • H
Command InjectionCVE-2026-34387
Affects github.com/fleetdm/fleet/pkg/file | Versions <4.81.1
Has fix
GoPublished 2 Apr 2026
  • H
Command InjectionCVE-2026-34387
Affects github.com/fleetdm/fleet/ee/server/service | Versions <4.81.1
Has fix
GoPublished 2 Apr 2026
  • H
Command InjectionCVE-2026-34387
Affects github.com/fleetdm/fleet/v4/pkg/file | Versions <4.81.1
Has fix
GoPublished 2 Apr 2026
  • H
Command InjectionCVE-2026-34387
Affects github.com/fleetdm/fleet/v4/ee/server/service | Versions <4.81.1
Has fix
GoPublished 2 Apr 2026
  • L
Authorization Bypass Through User-Controlled KeyCVE-2026-5199
Affects go.temporal.io/server/service/worker/batcher | Versions >=1.29.0 <1.29.5>=1.30.0 <1.30.3
Has fix
GoPublished 2 Apr 2026