Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Symlink AttackCVE-2026-50163
Affects github.com/oras-project/oras-go/v3/content/file | Versions <3.0.0-dev
Has fix
GoPublished 7 Jul 2026
  • H
Race ConditionCVE-2026-50139
Affects goshs.de/goshs/v2/httpserver | Versions <2.1.0
Has fix
GoPublished 7 Jul 2026
  • M
Missing Authentication for Critical FunctionCVE-2026-49254
Affects d7y.io/dragonfly/v2/manager/router | Versions <2.4.4-rc.3
Has fix
GoPublished 7 Jul 2026
  • M
Missing Authentication for Critical FunctionCVE-2026-49254
Affects d7y.io/dragonfly/v2/manager/models | Versions <2.4.4-rc.3
Has fix
GoPublished 7 Jul 2026
  • M
Out-of-bounds ReadCVE-2026-54908
Affects github.com/pion/dtls/v3 | Versions <3.1.3
Has fix
GoPublished 7 Jul 2026
  • H
User ImpersonationCVE-2026-50141
Affects go.woodpecker-ci.org/woodpecker/v3/server/rpc | Versions <3.14.1
Has fix
GoPublished 7 Jul 2026
  • H
Improper AuthenticationCVE-2026-58423
Affects gitea.dev/cmd | Versions >=1.23.0 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2026-58426
Affects gitea.dev/routers/actions | Versions >=1.22.0 <1.26.2
Has fix
GoPublished 7 Jul 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2026-58426
Affects gitea.dev/routers/api/v1/repo | Versions >=1.22.0 <1.26.2
Has fix
GoPublished 7 Jul 2026
  • H
Access Control BypassCVE-2026-58422
Affects gitea.dev/services/auth/source/oauth2 | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • H
Access Control BypassCVE-2026-58422
Affects gitea.dev/routers/web/auth | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • H
Improper AuthorizationCVE-2026-58424
Affects gitea.dev/services/actions | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • H
Improper AuthorizationCVE-2026-58424
Affects gitea.dev/models/actions | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-58421
Affects gitea.dev/models/issues | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-58421
Affects gitea.dev/services/issue | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • M
Information ExposureCVE-2026-58419
Affects gitea.dev/routers/web/feed | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Information ExposureCVE-2026-58419
Affects gitea.dev/services/convert | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Information ExposureCVE-2026-58419
Affects gitea.dev/modules/git | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-58418
Affects gitea.dev/modules/git | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-58418
Affects gitea.dev/routers/web/feed | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-58418
Affects gitea.dev/services/convert | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • M
Authorization Bypass Through User-Controlled KeyCVE-2026-28740
Affects gitea.dev/models/git | Versions >=1.0.0 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-27780
Affects gitea.dev/cmd | Versions <1.26.0-rc0
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-27779
Affects gitea.dev/modules/httplib | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • H
Cross-site Scripting (XSS)CVE-2026-28737
Affects gitea.dev/routers/web/repo | Versions >=1.25.0 <1.26.0
Has fix
GoPublished 7 Jul 2026
  • H
Cross-site Scripting (XSS)CVE-2026-28737
Affects gitea.dev/modules/public | Versions >=1.25.0 <1.26.0
Has fix
GoPublished 7 Jul 2026
  • H
Cross-site Scripting (XSS)CVE-2026-28737
Affects gitea.dev/modules/markup | Versions >=1.25.0 <1.26.0
Has fix
GoPublished 7 Jul 2026
  • H
Cross-site Scripting (XSS)CVE-2026-28737
Affects gitea.dev/models/renderhelper | Versions >=1.25.0 <1.26.0
Has fix
GoPublished 7 Jul 2026
  • H
Directory TraversalCVE-2026-28705
Affects gitea.dev/services/migrations | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-20909
Affects gitea.dev/services/convert | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026