Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Affects
github.com/gorilla/websocket
| Versions
<1.5.3
M
Improper Locking
CVE-2026-45404
Affects
github.com/open-telemetry/opentelemetry-go/bridge/opentracing
| Versions
>=0.11.0 <1.45.0
M
Directory Traversal
CVE-2026-61625
Affects
github.com/victoriametrics/victoriametrics/lib/backup/common
| Versions
<1.122.25
>=1.123.0 <1.136.12
>=1.137.0 <1.146.0
M
Directory Traversal
CVE-2026-61625
Affects
github.com/victoriametrics/victoriametrics/lib/backup/actions
| Versions
<1.122.25
>=1.123.0 <1.136.12
>=1.137.0 <1.146.0
M
Directory Traversal
CVE-2026-61625
Affects
github.com/victoriametrics/victoriametrics/lib/backup/fslocal
| Versions
<1.122.25
>=1.123.0 <1.136.12
>=1.137.0 <1.146.0
H
Memory Allocation with Excessive Size Value
CVE-2026-77354
Affects
github.com/getkin/kin-openapi/openapi3filter
| Versions
<0.142.0
H
NULL Pointer Dereference
CVE-2026-76905
Affects
github.com/getkin/kin-openapi/openapi3filter
| Versions
>=0.10.0 <0.141.0
L
Allocation of Resources Without Limits or Throttling
CVE-2026-61712
Affects
github.com/moby/buildkit/executor/oci
| Versions
<0.31.1
L
Allocation of Resources Without Limits or Throttling
CVE-2026-61712
Affects
github.com/moby/buildkit/solver/llbsolver/ops
| Versions
<0.31.1
M
Improper Validation of Specified Type of Input
CVE-2026-61711
Affects
github.com/moby/buildkit/client/llb
| Versions
<0.31.1
M
Improper Validation of Specified Type of Input
CVE-2026-61711
Affects
github.com/moby/buildkit/executor/oci
| Versions
<0.31.1
M
Directory Traversal
CVE-2026-63328
Affects
github.com/aquasecurity/trivy/pkg/plugin
| Versions
<0.72.0
M
Directory Traversal
CVE-2026-63328
Affects
github.com/aquasecurity/trivy/pkg/commands
| Versions
<0.72.0
M
Directory Traversal
CVE-2026-63328
Affects
github.com/aquasecurity/trivy/pkg/x/os
| Versions
<0.72.0
H
Symlink Attack
CVE-2026-17106
Affects
github.com/moby/moby/v2/vendor/github.com/moby/go-archive
| Versions
<2.0.0-beta.20
H
Symlink Attack
CVE-2026-17106
Affects
github.com/moby/go-archive
| Versions
<0.3.0
H
Uncontrolled Recursion
CVE-2026-33818
Affects
std/encoding/asn1
| Versions
<1.25.13
>=1.26.0-0 <1.26.6
>=1.27.0-0 <1.27.0-rc.3
M
Cross-site Scripting (XSS)
CVE-2026-56858
Affects
std/html/template
| Versions
<1.25.13
>=1.26.0-0 <1.26.6
>=1.27.0-0 <1.27.0-rc.3
H
Uncontrolled Recursion
CVE-2026-56859
Affects
std/encoding/xml
| Versions
<1.25.13
>=1.26.0-0 <1.26.6
>=1.27.0-0 <1.27.0-rc.3
H
Denial of Service (DoS)
CVE-2026-56862
Affects
std/crypto/tls
| Versions
<1.25.13
>=1.26.0-0 <1.26.6
>=1.27.0-0 <1.27.0-rc.3
H
Uncaught Exception
CVE-2026-46600
Affects
std/net
| Versions
>=1.26.0-0 <1.26.6
>=1.27.0-0 <1.27.0-rc.3
H
Denial of Service (DoS)
CVE-2026-56860
Affects
std/net/url
| Versions
<1.25.13
>=1.26.0-0 <1.26.6
>=1.27.0-0 <1.27.0-rc.3
H
Denial of Service (DoS)
CVE-2026-56853
Affects
std/net/http
| Versions
<1.25.13
>=1.26.0-0 <1.26.6
>=1.27.0-0 <1.27.0-rc.3
H
Symlink Attack
CVE-2026-71556
Affects
github.com/go-git/go-git
| Versions
>=0.0.0
H
Symlink Attack
CVE-2026-71556
Affects
github.com/go-git/go-git/v5
| Versions
>=5.0.0 <5.19.2
H
Symlink Attack
CVE-2026-71556
Affects
github.com/go-git/go-git/v6
| Versions
>=6.0.0-alpha.1 <6.0.0-alpha.5
M
Brute Force
CVE-2026-19898
Affects
github.com/victoriametrics/victoriametrics/app/vmauth
| Versions
<1.147.0
M
Incorrect Authorization
CVE-2026-58444
Affects
github.com/go-gitea/gitea/routers/web/feed
| Versions
<1.27.0
M
Incorrect Authorization
CVE-2026-58444
Affects
github.com/go-gitea/gitea/routers/web/repo
| Versions
<1.27.0
M
Incorrect Authorization
CVE-2026-58444
Affects
github.com/go-gitea/gitea/services/auth
| Versions
<1.27.0