Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Improper Validation of Integrity Check Value
CVE-2026-85747
Affects
github.com/distribution/distribution/v3/internal/client
| Versions
<3.1.2
M
Missing Authorization
CVE-2026-103433
Affects
github.com/docker/buildx/commands
| Versions
<0.37.2
M
Missing Authorization
CVE-2026-103433
Affects
github.com/docker/buildx/bake
| Versions
<0.37.2
H
Improper Validation of Integrity Check Value
CVE-2026-85747
Affects
github.com/distribution/distribution/internal/client
| Versions
<3.1.2
H
Incorrect Authorization
CVE-2026-104355
Affects
go.temporal.io/server/service/history
| Versions
<1.30.8
>=1.31.0 <1.31.4
>=1.32.0 <1.32.1
H
Incorrect Authorization
CVE-2026-104355
Affects
go.temporal.io/server/service/worker/replicator
| Versions
<1.30.8
>=1.31.0 <1.31.4
>=1.32.0 <1.32.1
H
Incorrect Authorization
CVE-2026-104355
Affects
go.temporal.io/server/common
| Versions
<1.30.8
>=1.31.0 <1.31.4
>=1.32.0 <1.32.1
H
Use After Free
CVE-2026-95702
Affects
github.com/google/gvisor/pkg/sentry/vfs
| Versions
<20260831.0
H
Incorrect Authorization
CVE-2026-104355
Affects
github.com/temporalio/temporal/service/worker/replicator
| Versions
<1.30.8
>=1.31.0 <1.31.4
>=1.32.0 <1.32.1
H
Incorrect Authorization
CVE-2026-104355
Affects
github.com/temporalio/temporal/service/history
| Versions
<1.30.8
>=1.31.0 <1.31.4
>=1.32.0 <1.32.1
H
Incorrect Authorization
CVE-2026-104355
Affects
github.com/temporalio/temporal/common
| Versions
<1.30.8
>=1.31.0 <1.31.4
>=1.32.0 <1.32.1
M
Authorization Bypass Through User-Controlled Key
CVE-2026-89140
Affects
go.temporal.io/server/service/frontend
| Versions
>=1.30.0 <1.30.8
>=1.31.0 <1.31.4
>=1.32.0 <1.32.1
M
Authorization Bypass Through User-Controlled Key
CVE-2026-89140
Affects
go.temporal.io/server/chasm/lib/callback
| Versions
>=1.30.0 <1.30.8
>=1.31.0 <1.31.4
>=1.32.0 <1.32.1
M
Authorization Bypass Through User-Controlled Key
CVE-2026-89140
Affects
github.com/temporalio/temporal/service/frontend
| Versions
>=1.30.0 <1.30.8
>=1.31.0 <1.31.4
>=1.32.0 <1.32.1
M
Authorization Bypass Through User-Controlled Key
CVE-2026-89140
Affects
github.com/temporalio/temporal/chasm/lib/callback
| Versions
>=1.30.0 <1.30.8
>=1.31.0 <1.31.4
>=1.32.0 <1.32.1
H
Command Injection
CVE-2026-55797
Affects
github.com/argoproj/argo-cd/v3/util/git
| Versions
<3.3.15
>=3.4.0 <3.4.10
>=3.5.0 <3.5.4
H
Command Injection
CVE-2026-55797
Affects
github.com/argoproj/argo-cd/v2/util/git
| Versions
>=0.0.0
H
Command Injection
CVE-2026-55797
Affects
github.com/argoproj/argo-cd/util/git
| Versions
>=0.0.0
H
Incorrect Behavior Order
CVE-2026-26287
Affects
github.com/external-secrets/external-secrets
| Versions
>=0.10.0 <1.3.2
L
Incorrect Authorization
CVE-2026-81870
Affects
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
| Versions
>=1.5.0 <1.45.0
L
Incorrect Authorization
CVE-2026-81870
Affects
go.opentelemetry.io/otel/exporters/zipkin
| Versions
>=1.5.0 <1.45.0
L
Incorrect Authorization
CVE-2026-81870
Affects
go.opentelemetry.io/otel/sdk/trace
| Versions
>=1.5.0 <1.45.0
L
Incorrect Authorization
CVE-2026-81870
Affects
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
| Versions
>=1.5.0 <1.45.0
L
Incorrect Authorization
CVE-2026-81870
Affects
go.opentelemetry.io/otel/exporters/otlp/otlptrace
| Versions
>=1.5.0 <1.45.0
C
Timing Attack
CVE-2026-63132
Affects
github.com/openbao/openbao/v2/http
| Versions
<2.6.0
H
Command Injection
CVE-2026-89139
Affects
go.temporal.io/auto-scaled-workers/wci/workflow
| Versions
<0.2.0-1.32.0.158.0
H
Command Injection
CVE-2026-89139
Affects
go.temporal.io/auto-scaled-workers/wci/workflow/compute_provider
| Versions
<0.2.0-1.32.0.158.0
H
Unchecked Input for Loop Condition
CVE-2026-16652
Affects
go.temporal.io/server/service/worker/scheduler
| Versions
>=1.17.0 <1.30.7
>=1.31.0 <1.31.3
H
Reliance on Untrusted Inputs in a Security Decision
CVE-2026-87858
Affects
go.temporal.io/server/chasm/lib/callback
| Versions
>=1.30.0 <1.30.7
>=1.31.0 <1.31.3
H
Reliance on Untrusted Inputs in a Security Decision
CVE-2026-87858
Affects
go.temporal.io/server/components/callbacks
| Versions
>=1.30.0 <1.30.7
>=1.31.0 <1.31.3