Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Improper Resource Shutdown or ReleaseCVE-2026-4531
Affects github.com/free5gc/amf/internal/gmm | Versions <1.4.3
Has fix
GoPublished 20 Apr 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-5052
Affects github.com/hashicorp/vault | Versions >=1.14.0 <2.0.0-rc1
Has fix
GoPublished 20 Apr 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-5807
Affects github.com/hashicorp/vault/http | Versions <2.0.0
Has fix
GoPublished 20 Apr 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-5807
Affects github.com/hashicorp/vault/vault | Versions <2.0.0
Has fix
GoPublished 20 Apr 2026
  • H
Insertion of Sensitive Information Into Sent DataCVE-2026-4525
Affects github.com/hashicorp/vault/vault | Versions >=0.11.2 <2.0.0-rc1
Has fix
GoPublished 20 Apr 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-41413
Affects github.com/istio/istio/pilot/pkg/xds | Versions <1.28.6>=1.29.0-alpha.0 <1.29.2
Has fix
GoPublished 20 Apr 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-41413
Affects github.com/istio/istio/pilot/pkg/model | Versions <1.28.6>=1.29.0-alpha.0 <1.29.2
Has fix
GoPublished 20 Apr 2026
  • M
Incorrect AuthorizationCVE-2026-40304
Affects github.com/openziti/zrok/controller | Versions >=0.0.0
Has fix
GoPublished 20 Apr 2026
  • M
Incorrect AuthorizationCVE-2026-40304
Affects github.com/openziti/zrok/v2/controller | Versions <2.0.1
Has fix
GoPublished 20 Apr 2026
  • M
Incorrect AuthorizationCVE-2026-40304
Affects github.com/openziti/zrok/controller/store | Versions >=0.0.0
Has fix
GoPublished 20 Apr 2026
  • M
Incorrect AuthorizationCVE-2026-40304
Affects github.com/openziti/zrok/v2/controller/store | Versions <2.0.1
Has fix
GoPublished 20 Apr 2026
  • H
Arbitrary Argument InjectionCVE-2026-35585
Affects github.com/filebrowser/filebrowser/v2/runner | Versions >=2.0.0-rc.1
Has fix
GoPublished 20 Apr 2026
  • M
Directory TraversalCVE-2026-35605
Affects github.com/filebrowser/filebrowser/rules | Versions <2.63.1
Has fix
GoPublished 20 Apr 2026
  • H
Improper Privilege ManagementCVE-2026-35607
Affects github.com/filebrowser/filebrowser/v2/auth | Versions <2.63.1
Has fix
GoPublished 20 Apr 2026
  • H
Improper Privilege ManagementCVE-2026-35607
Affects github.com/filebrowser/filebrowser/auth | Versions <2.63.1
Has fix
GoPublished 20 Apr 2026
  • M
Missing AuthorizationCVE-2026-35606
Affects github.com/filebrowser/filebrowser/v2/http | Versions <2.63.1
Has fix
GoPublished 20 Apr 2026
  • M
Missing AuthorizationCVE-2026-35606
Affects github.com/filebrowser/filebrowser/http | Versions <2.63.1
Has fix
GoPublished 20 Apr 2026
  • H
Incorrect AuthorizationCVE-2026-35604
Affects github.com/filebrowser/filebrowser/v2/http | Versions <2.63.1
Has fix
GoPublished 20 Apr 2026
  • H
Incorrect AuthorizationCVE-2026-35604
Affects github.com/filebrowser/filebrowser/http | Versions <2.63.1
Has fix
GoPublished 20 Apr 2026
  • M
Directory TraversalCVE-2026-35605
Affects github.com/filebrowser/filebrowser/v2/rules | Versions <2.63.1
Has fix
GoPublished 20 Apr 2026
  • H
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-3605
Affects github.com/hashicorp/vault/api | Versions >=0.10.0 <2.0.0
Has fix
GoPublished 19 Apr 2026
  • M
Insufficiently Protected Credentials
Affects github.com/go-git/go-git/v5/plumbing/transport/http | Versions >=5.3.0 <5.18.0
Has fix
GoPublished 19 Apr 2026
  • M
Insufficiently Protected Credentials
Affects github.com/go-git/go-git/v6/plumbing/transport/http | Versions >=6.0.0-alpha.1 <6.0.0-alpha.2
Has fix
GoPublished 19 Apr 2026
  • M
Insufficiently Protected Credentials
Affects github.com/go-git/go-git/plumbing/transport/http | Versions >=5.3.0 <5.18.0>=6.0.0-alpha.1 <6.0.0-alpha.2
Has fix
GoPublished 19 Apr 2026
  • H
Cross-site Request Forgery (CSRF)CVE-2026-28741
Affects github.com/mattermost/mattermost/server/channels/api4 | Versions >=10.11.0 <10.11.13>=11.3.0 <11.3.3>=11.4.0 <11.4.3>=11.5.0 <11.5.1
Has fix
GoPublished 19 Apr 2026
  • H
Time-of-check Time-of-use (TOCTOU) Race ConditionCVE-2026-32282
Affects std/internal/syscall/unix | Versions <1.25.9>=1.26.0-0 <1.26.2
Has fix
GoPublished 16 Apr 2026
  • M
Insufficient Session ExpirationCVE-2026-34454
Affects github.com/oauth2-proxy/oauth2-proxy/v7 | Versions >=7.11.0 <7.15.2
Has fix
GoPublished 16 Apr 2026
  • C
LDAP InjectionCVE-2026-40193
Affects github.com/foxcpp/maddy/internal/auth/ldap | Versions >=0.5.0 <0.9.3
Has fix
GoPublished 16 Apr 2026
  • C
User ImpersonationCVE-2026-34457
Affects github.com/oauth2-proxy/oauth2-proxy/pkg/middleware | Versions >=6.0.0 <7.15.2
Has fix
GoPublished 16 Apr 2026
  • C
User ImpersonationCVE-2026-34457
Affects github.com/oauth2-proxy/oauth2-proxy/v7/pkg/middleware | Versions <7.15.2
Has fix
GoPublished 16 Apr 2026