Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Improper Input ValidationCVE-2026-33729
Affects github.com/openfga/openfga/pkg/storage | Versions <1.13.1
Has fix
GoPublished 27 Mar 2026
  • H
Symlink AttackCVE-2026-33748
Affects github.com/moby/buildkit/util/gitutil | Versions <0.28.1
Has fix
GoPublished 27 Mar 2026
  • H
Symlink AttackCVE-2026-33748
Affects github.com/moby/buildkit/source/git | Versions <0.28.1
Has fix
GoPublished 27 Mar 2026
  • H
Symlink AttackCVE-2026-33748
Affects github.com/moby/buildkit/client/llb | Versions <0.28.1
Has fix
GoPublished 27 Mar 2026
  • H
Directory TraversalCVE-2026-33747
Affects github.com/moby/buildkit/source/http | Versions <0.28.1
Has fix
GoPublished 27 Mar 2026
  • C
Permissive Cross-domain Policy with Untrusted DomainsCVE-2026-30924
Affects github.com/autobrr/qui/internal/domain | Versions <1.15.0
Has fix
GoPublished 27 Mar 2026
  • C
Permissive Cross-domain Policy with Untrusted DomainsCVE-2026-30924
Affects github.com/autobrr/qui/internal/config | Versions <1.15.0
Has fix
GoPublished 27 Mar 2026
  • C
Permissive Cross-domain Policy with Untrusted DomainsCVE-2026-30924
Affects github.com/autobrr/qui/internal/api | Versions <1.15.0
Has fix
GoPublished 27 Mar 2026
  • H
Integer Overflow or WraparoundCVE-2026-27889
Affects github.com/nats-io/nats-server/v2/server | Versions >=2.2.0 <2.11.14>=2.12.0 <2.12.5
Has fix
GoPublished 26 Mar 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-33081
Affects github.com/pinchtab/pinchtab/internal/handlers | Versions <0.8.3
Has fix
GoPublished 26 Mar 2026
  • H
NULL Pointer DereferenceCVE-2026-33282
Affects github.com/ellanetworks/core/internal/amf/ngap | Versions <1.6.0
Has fix
GoPublished 26 Mar 2026
  • M
Uncontrolled RecursionCVE-2026-33320
Affects github.com/tomwright/dasel/v3/parsing/yaml | Versions >=3.0.0 <3.3.2
Has fix
GoPublished 26 Mar 2026
  • H
Directory TraversalCVE-2026-33211
Affects github.com/tektoncd/pipeline/pkg/resolution/resolver/git | Versions >=1.0.0 <1.0.1>=1.1.0 <1.3.3>=1.4.0 <1.6.1>=1.7.0 <1.9.2>=1.10.0 <1.10.2
Has fix
GoPublished 26 Mar 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-33809
Affects golang.org/x/image/tiff | Versions <0.38.0
Has fix
GoPublished 26 Mar 2026
  • H
Integer Overflow or WraparoundCVE-2026-27889
Affects github.com/nats-io/nats-server/server | Versions >=2.2.0 <2.11.14>=2.12.0 <2.12.5
Has fix
GoPublished 26 Mar 2026
  • M
Incorrect Implementation of Authentication AlgorithmCVE-2026-32953
Affects github.com/tillitis/tkeyclient | Versions <1.3.0
Has fix
GoPublished 25 Mar 2026
  • M
Timing Attack
Affects github.com/gtsteffaniak/filebrowser/backend/database/storage | Versions <1.3.2-beta
Has fix
GoPublished 25 Mar 2026
  • M
Timing Attack
Affects github.com/gtsteffaniak/filebrowser/backend/database/storage/bolt | Versions <1.3.2-beta
Has fix
GoPublished 25 Mar 2026
  • M
Timing Attack
Affects github.com/gtsteffaniak/filebrowser/backend/common/utils | Versions <1.3.2-beta
Has fix
GoPublished 25 Mar 2026
  • M
Timing Attack
Affects github.com/gtsteffaniak/filebrowser/backend/cmd | Versions <1.3.2-beta
Has fix
GoPublished 25 Mar 2026
  • M
Timing Attack
Affects github.com/gtsteffaniak/filebrowser/backend/auth | Versions <1.3.2-beta
Has fix
GoPublished 25 Mar 2026
  • H
Improper Restriction of Communication Channel to Intended EndpointsCVE-2026-32768
Affects github.com/ctfer-io/chall-manager/sdk/kubernetes | Versions <0.6.5
Has fix
GoPublished 25 Mar 2026
  • H
Improper Restriction of Communication Channel to Intended EndpointsCVE-2026-32768
Affects github.com/ctfer-io/chall-manager/deploy/services/parts | Versions <0.6.5
Has fix
GoPublished 25 Mar 2026
  • H
Improper Restriction of Communication Channel to Intended EndpointsCVE-2026-32737
Affects github.com/ctfer-io/romeo/environment/deploy/parts | Versions <0.2.1
Has fix
GoPublished 25 Mar 2026
  • H
Improper Restriction of Communication Channel to Intended EndpointsCVE-2026-32737
Affects github.com/ctfer-io/romeo/install/deploy/parts | Versions <0.2.1
Has fix
GoPublished 25 Mar 2026
  • H
Insufficiently Protected CredentialsCVE-2026-32606
Affects github.com/lxc/incus-os/incus-osd/internal/storage | Versions <0.0.0-202603130128-e3b35f230d23
Has fix
GoPublished 25 Mar 2026
  • H
Insufficiently Protected CredentialsCVE-2026-32606
Affects github.com/lxc/incus-os/incus-osd/internal/secureboot | Versions <0.0.0-202603130128-e3b35f230d23
Has fix
GoPublished 25 Mar 2026
  • H
Insufficiently Protected CredentialsCVE-2026-32606
Affects github.com/lxc/incus-os/incus-osd/internal/systemd | Versions <0.0.0-202603130128-e3b35f230d23
Has fix
GoPublished 25 Mar 2026
  • M
User ImpersonationCVE-2026-33246
Affects github.com/nats-io/nats-server/v2/server | Versions *
No fix available
GoPublished 25 Mar 2026
  • M
User ImpersonationCVE-2026-33223
Affects github.com/nats-io/nats-server/v2/server | Versions <2.11.15>=2.12.0-RC.1 <2.12.6
Has fix
GoPublished 25 Mar 2026