Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Authorization Bypass Through User-Controlled Key
CVE-2026-87857
Affects
github.com/temporalio/temporal/service/history/api/getworkflowexecutionhistoryreverse
| Versions
>=1.0.0 <1.29.7
>=1.30.0 <1.30.7
>=1.31.0 <1.31.3
M
Authorization Bypass Through User-Controlled Key
CVE-2026-87857
Affects
github.com/temporalio/temporal/service/history/api/getworkflowexecutionhistory
| Versions
>=1.0.0 <1.29.7
>=1.30.0 <1.30.7
>=1.31.0 <1.31.3
M
Denial of Service (DoS)
CVE-2026-116472
Affects
k8s.io/ingress-nginx/internal/ingress/controller/template
| Versions
>=0.0.0
M
Symlink Attack
CVE-2026-121520
Affects
github.com/moby/buildkit/vendor/github.com/tonistiigi/fsutil
| Versions
<0.34.1
L
Incorrect Authorization
CVE-2026-121542
Affects
github.com/docker/buildx/bake
| Versions
>=0.19.0 <0.38.2
M
Incorrect Authorization
CVE-2026-121541
Affects
github.com/docker/buildx/bake
| Versions
>=0.19.0 <0.38.2
M
NULL Pointer Dereference
CVE-2026-121522
Affects
github.com/moby/buildkit/source/git
| Versions
>=0.26.0 <0.34.2
M
Permissive Cross-domain Policy with Untrusted Domains
CVE-2026-119285
Affects
github.com/gofiber/fiber/v2/middleware/cors
| Versions
>=2.52.1 <2.52.3
H
Missing Authorization
CVE-2026-93325
Affects
github.com/docker/buildx/commands
| Versions
>=0.21.0 <0.37.2
H
Missing Authorization
CVE-2026-93325
Affects
github.com/docker/buildx/bake
| Versions
>=0.21.0 <0.37.2
C
Embedded Malicious Code
Affects
github.com/vkuznet/gocurl
| Versions
=0.0.0-20261111095532-8d5aad0cb0da
C
Embedded Malicious Code
Affects
github.com/onuragtas/docker-env
| Versions
=1.0.278
=1.0.280
=1.0.282
M
HTTP Request Smuggling
CVE-2026-55458
Affects
github.com/caddyserver/caddy/v2/modules/caddyhttp/reverseproxy
| Versions
<2.11.5
H
Improper Verification of Cryptographic Signature
CVE-2026-122267
Affects
github.com/chainguard-forks/minio/cmd
| Versions
<RELEASE.2026-09-22T19-25-18Z
M
Open Redirect
CVE-2026-122132
Affects
github.com/go-chi/chi/v5/middleware
| Versions
>=5.2.2
M
Open Redirect
CVE-2026-122132
Affects
github.com/go-chi/chi/middleware
| Versions
>=5.2.2
M
Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-2270
Affects
k8s.io/kubernetes/pkg/controller/statefulset
| Versions
>=1.34.0 <1.34.12
>=1.35.0-alpha.0 <1.35.9
>=1.36.0-alpha.0 <1.36.5
>=1.37.0-alpha.0 <1.37.1
>=1.38.0-alpha.0 <1.38.0-alpha.1
M
Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-2270
Affects
github.com/kubernetes/kubernetes/pkg/controller/statefulset
| Versions
>=1.34.0 <1.34.12
>=1.35.0-alpha.0 <1.35.9
>=1.36.0-alpha.0 <1.36.5
>=1.37.0-alpha.0 <1.37.1
>=1.38.0-alpha.0 <1.38.0-alpha.1
H
Eval Injection
CVE-2026-80351
Affects
github.com/apache/camel-k/v2/pkg/trait
| Versions
>=2.0.0 <2.9.3
>=2.10.0 <2.10.2
H
Allocation of Resources Without Limits or Throttling
CVE-2026-54462
Affects
knative.dev/pkg/webhook
| Versions
>=0.0.0
H
Directory Traversal
CVE-2026-118655
Affects
github.com/labstack/echo/v5/internal/pathutil
| Versions
<4.15.3
H
Directory Traversal
CVE-2026-118655
Affects
github.com/labstack/echo/v5
| Versions
<4.15.3
H
Improper Validation of Syntactic Correctness of Input
CVE-2026-111497
Affects
github.com/andybalholm/brotli
| Versions
<1.2.7
M
Insufficiently Protected Credentials
CVE-2026-119566
Affects
github.com/prometheus/prometheus/storage/remote/azuread
| Versions
>=0.0.0
H
Use of Non-Canonical URL Paths for Authorization Decisions
CVE-2026-118650
Affects
github.com/labstack/echo/v4
| Versions
<4.16.0
H
Use of Non-Canonical URL Paths for Authorization Decisions
CVE-2026-118650
Affects
github.com/labstack/echo/v5
| Versions
>=5.0.0 <5.4.0
H
Use of Non-Canonical URL Paths for Authorization Decisions
CVE-2026-118650
Affects
github.com/labstack/echo/v4/middleware
| Versions
<4.16.0
H
Use of Non-Canonical URL Paths for Authorization Decisions
CVE-2026-118650
Affects
github.com/labstack/echo/v5/middleware
| Versions
>=5.0.0 <5.4.0
H
Directory Traversal
CVE-2026-118655
Affects
github.com/labstack/echo/v5/middleware
| Versions
<5.2.0
H
Directory Traversal
CVE-2026-118655
Affects
github.com/labstack/echo/v4/internal/pathutil
| Versions
<4.15.3