Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Missing AuthorizationCVE-2026-27771
Affects gitea.dev/models/user | Versions <1.26.2
Has fix
GoPublished 7 Jul 2026
  • H
Missing AuthorizationCVE-2026-27771
Affects gitea.dev/routers/api/packages/composer | Versions <1.26.2
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-26292
Affects gitea.dev/services/mirror | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • M
Sensitive Cookie in HTTPS Session Without "Secure" AttributeCVE-2026-11956
Affects github.com/twin/gatus/v5/security | Versions >=0.0.0
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-27660
Affects gitea.dev/routers/api/v1/repo | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-24690
Affects gitea.dev/services/pull | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-22874
Affects gitea.dev/modules/hostmatcher | Versions <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Information ExposureCVE-2026-24451
Affects gitea.dev/services/auth | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Information ExposureCVE-2026-24451
Affects gitea.dev/services/repository | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Information ExposureCVE-2026-24451
Affects gitea.dev/routers | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Information ExposureCVE-2026-24451
Affects gitea.dev/models/auth | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Missing AuthorizationCVE-2026-25038
Affects gitea.dev/routers | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Missing AuthorizationCVE-2026-25038
Affects gitea.dev/services/repository | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Missing AuthorizationCVE-2026-25038
Affects gitea.dev/services/auth | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Missing AuthorizationCVE-2026-25038
Affects gitea.dev/models/auth | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-39904
Affects github.com/gophish/gophish/models | Versions >=0.0.0
Has fix
GoPublished 7 Jul 2026
  • H
Missing AuthorizationCVE-2026-58165
Affects github.com/openziti/ziti/v2/controller/internal/routes | Versions <2.0.1
Has fix
GoPublished 7 Jul 2026
  • M
NULL Pointer DereferenceCVE-2026-58369
Affects go.woodpecker-ci.org/woodpecker/v3/server/store/mocks | Versions <3.15.0
Has fix
GoPublished 7 Jul 2026
  • M
NULL Pointer DereferenceCVE-2026-58369
Affects go.woodpecker-ci.org/woodpecker/v3/server/store/datastore | Versions <3.15.0
Has fix
GoPublished 7 Jul 2026
  • M
NULL Pointer DereferenceCVE-2026-58369
Affects go.woodpecker-ci.org/woodpecker/v3/server/api | Versions <3.15.0
Has fix
GoPublished 7 Jul 2026
  • M
NULL Pointer DereferenceCVE-2026-58369
Affects go.woodpecker-ci.org/woodpecker/v3/server/store | Versions <3.15.0
Has fix
GoPublished 7 Jul 2026
  • C
User ImpersonationCVE-2026-58370
Affects go.woodpecker-ci.org/woodpecker/v3/cli/exec | Versions <3.15.0
Has fix
GoPublished 7 Jul 2026
  • C
User ImpersonationCVE-2026-58370
Affects go.woodpecker-ci.org/woodpecker/v3/server/store | Versions <3.15.0
Has fix
GoPublished 7 Jul 2026
  • L
UNIX Symbolic Link (Symlink) FollowingCVE-2026-13218
Affects kubevirt.io/kubevirt/pkg/network/cache | Versions >=0.0.0
Has fix
GoPublished 7 Jul 2026
  • M
Improper AuthenticationCVE-2026-13208
Affects kubevirt.io/kubevirt/pkg/virt-handler/notify-server | Versions >=0.0.0
Has fix
GoPublished 7 Jul 2026
  • M
UNIX Symbolic Link (Symlink) FollowingCVE-2026-13201
Affects kubevirt.io/kubevirt/pkg/virt-handler/isolation | Versions <1.9.0-rc.0
Has fix
GoPublished 7 Jul 2026
  • C
Embedded Malicious Code
Affects zuri.chat/zccore | Versions >=0.0.0
Has fix
GoPublished 7 Jul 2026
  • M
Cleartext Transmission of Sensitive InformationCVE-2026-53624
Affects github.com/gofiber/fiber/v3/middleware/helmet | Versions <3.4.0
Has fix
GoPublished 7 Jul 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-54637
Affects d7y.io/dragonfly/v2/scheduler/resource/standard | Versions <2.4.4-rc.3
Has fix
GoPublished 7 Jul 2026
  • H
External Control of File Name or PathCVE-2026-55477
Affects github.com/mhsanaei/3x-ui/v3/internal/web/service | Versions <3.3.1
Has fix
GoPublished 7 Jul 2026