Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Permissive Regular ExpressionCVE-2026-25542
Affects github.com/tektoncd/pipeline/pkg/trustedresources | Versions >=0.43.0 <1.0.2>=1.1.0 <1.3.4>=1.4.0 <1.6.2>=1.7.0 <1.9.3>=1.10.0 <1.11.1
Has fix
GoPublished 24 Apr 2026
  • M
Insecure Default Initialization of Resource
Affects code.gitea.io/gitea/modules/ssh | Versions <1.25.0-rc0
Has fix
GoPublished 24 Apr 2026
  • M
Insecure Default Initialization of Resource
Affects code.gitea.io/gitea/modules/setting | Versions <1.25.0-rc0
Has fix
GoPublished 24 Apr 2026
  • M
Insecure Default Initialization of Resource
Affects github.com/go-gitea/gitea/modules/ssh | Versions <1.25.0-rc0
Has fix
GoPublished 24 Apr 2026
  • C
Missing Authentication for Critical FunctionCVE-2026-41176
Affects github.com/rclone/rclone/fs/rc/rcserver | Versions >=1.45 <1.73.5
Has fix
GoPublished 24 Apr 2026
  • C
Missing Authentication for Critical FunctionCVE-2026-41176
Affects github.com/rclone/rclone/fs/rc | Versions >=1.45 <1.73.5
Has fix
GoPublished 24 Apr 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-35458
Affects github.com/gotenberg/gotenberg/pkg/modules/chromium | Versions <8.30.0
Has fix
GoPublished 24 Apr 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-35458
Affects github.com/gotenberg/gotenberg/v8/pkg/modules/chromium | Versions <8.30.0
Has fix
GoPublished 24 Apr 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-35458
Affects github.com/gotenberg/gotenberg/v7/pkg/modules/chromium | Versions >=1.0.0
Has fix
GoPublished 24 Apr 2026
  • C
Missing Authentication for Critical FunctionCVE-2026-41179
Affects github.com/rclone/rclone/fs/operations | Versions <1.73.5
Has fix
GoPublished 24 Apr 2026
  • H
Reachable AssertionCVE-2026-41485
Affects github.com/kyverno/kyverno/pkg/engine/mutate | Versions >=1.13.0 <1.16.4>=1.17.0-rc.1 <1.17.2
Has fix
GoPublished 24 Apr 2026
  • H
Improper Validation of Array IndexCVE-2026-40886
Affects github.com/argoproj/argo-workflows/v4/workflow/controller/pod | Versions >=3.6.5 <3.7.14>=4.0.0 <4.0.5
Has fix
GoPublished 24 Apr 2026
  • H
Improper Validation of Array IndexCVE-2026-40886
Affects github.com/argoproj/argo-workflows/workflow/controller/pod | Versions >=3.6.5 <3.7.14>=4.0.0 <4.0.5
Has fix
GoPublished 24 Apr 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2022-1996
Affects github.com/emicklei/go-restful | Versions <2.16.0
Has fix
GoPublished 23 Apr 2026
  • M
Improper Certificate ValidationCVE-2026-39984
Affects github.com/sigstore/timestamp-authority/v2/pkg/verification | Versions <2.0.6
Has fix
GoPublished 23 Apr 2026
  • M
Improper Certificate ValidationCVE-2026-39984
Affects github.com/sigstore/timestamp-authority/pkg/verification | Versions <2.0.6
Has fix
GoPublished 23 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-40179
Affects github.com/prometheus/prometheus/web/ui | Versions <0.305.2>=0.306.0-rc.0 <0.311.2>=1.0.0-rc.0 <3.5.2>=3.6.0 <3.11.2
Has fix
GoPublished 23 Apr 2026
  • L
SQL Injection
Affects github.com/jackc/pgx/internal/sanitize | Versions <5.9.2
Has fix
GoPublished 23 Apr 2026
  • L
SQL Injection
Affects github.com/jackc/pgx | Versions <5.9.2
Has fix
GoPublished 23 Apr 2026
  • H
Directory TraversalCVE-2026-40611
Affects github.com/go-acme/lego/v4/challenge/http01 | Versions <4.34.0
Has fix
GoPublished 22 Apr 2026
  • C
User ImpersonationCVE-2026-40575
Affects github.com/oauth2-proxy/oauth2-proxy/pkg/ip | Versions <7.15.2
Has fix
GoPublished 22 Apr 2026
  • C
User ImpersonationCVE-2026-40575
Affects github.com/oauth2-proxy/oauth2-proxy/v7/pkg/ip | Versions <7.15.2
Has fix
GoPublished 22 Apr 2026
  • C
User ImpersonationCVE-2026-40575
Affects github.com/oauth2-proxy/oauth2-proxy/pkg/apis/middleware | Versions <7.15.2
Has fix
GoPublished 22 Apr 2026
  • C
User ImpersonationCVE-2026-40575
Affects github.com/oauth2-proxy/oauth2-proxy/v7/pkg/apis/middleware | Versions <7.15.2
Has fix
GoPublished 22 Apr 2026
  • C
User ImpersonationCVE-2026-40575
Affects github.com/oauth2-proxy/oauth2-proxy/pkg/middleware | Versions <7.15.2
Has fix
GoPublished 22 Apr 2026
  • C
User ImpersonationCVE-2026-40575
Affects github.com/oauth2-proxy/oauth2-proxy/v7/pkg/middleware | Versions <7.15.2
Has fix
GoPublished 22 Apr 2026
  • C
User ImpersonationCVE-2026-40575
Affects github.com/oauth2-proxy/oauth2-proxy/pkg/validation | Versions <7.15.2
Has fix
GoPublished 22 Apr 2026
  • C
User ImpersonationCVE-2026-40575
Affects github.com/oauth2-proxy/oauth2-proxy/v7/pkg/validation | Versions <7.15.2
Has fix
GoPublished 22 Apr 2026
  • C
User ImpersonationCVE-2026-40575
Affects github.com/oauth2-proxy/oauth2-proxy/pkg/requests/util | Versions <7.15.2
Has fix
GoPublished 22 Apr 2026
  • C
User ImpersonationCVE-2026-40575
Affects github.com/oauth2-proxy/oauth2-proxy/v7/pkg/requests/util | Versions <7.15.2
Has fix
GoPublished 22 Apr 2026