Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Cross-site Scripting (XSS)CVE-2026-27616
Affects code.vikunja.io/api/pkg/routes/api/v1 | Versions <2.0.0
Has fix
GoPublished 10 Mar 2026
  • M
Cross-site Scripting (XSS)CVE-2026-27616
Affects github.com/go-vikunja/vikunja/pkg/routes/api/v1 | Versions <2.0.0
Has fix
GoPublished 10 Mar 2026
  • H
Resource InjectionCVE-2026-3288
Affects k8s.io/ingress-nginx/internal/ingress/controller/template | Versions <1.13.8>=1.14.0 <1.14.4
Has fix
GoPublished 10 Mar 2026
  • H
Resource InjectionCVE-2026-3288
Affects github.com/kubernetes/ingress-nginx/internal/ingress/controller/template | Versions <1.13.8>=1.14.0 <1.14.4
Has fix
GoPublished 10 Mar 2026
  • M
Header InjectionCVE-2026-30852
Affects github.com/caddyserver/caddy/v2/modules/caddyhttp | Versions >=2.7.5 <2.11.2
Has fix
GoPublished 10 Mar 2026
  • M
Header InjectionCVE-2026-30852
Affects github.com/caddyserver/caddy/modules/caddyhttp | Versions >=2.7.5 <2.11.2
Has fix
GoPublished 10 Mar 2026
  • H
Header InjectionCVE-2026-30851
Affects github.com/caddyserver/caddy/modules/caddyhttp/reverseproxy/forwardauth | Versions >=2.10.0 <2.11.2
Has fix
GoPublished 10 Mar 2026
  • H
Header InjectionCVE-2026-30851
Affects github.com/caddyserver/caddy/v2/modules/caddyhttp/reverseproxy/forwardauth | Versions >=2.10.0 <2.11.2
Has fix
GoPublished 10 Mar 2026
  • H
Incorrect Permission Assignment for Critical ResourceCVE-2026-29188
Affects github.com/filebrowser/filebrowser/v2/http | Versions <2.61.1
Has fix
GoPublished 9 Mar 2026
  • C
Brute ForceCVE-2026-27981
Affects github.com/sysadminsmedia/homebox/backend/app/api | Versions <0.24.0-rc.1
Has fix
GoPublished 9 Mar 2026
  • C
Brute ForceCVE-2026-27981
Affects github.com/sysadminsmedia/homebox/backend/app/api/handlers/v1 | Versions <0.24.0-rc.1
Has fix
GoPublished 9 Mar 2026
  • M
Cross-site Scripting (XSS)CVE-2026-26272
Affects github.com/sysadminsmedia/homebox/backend/app/api/handlers/v1 | Versions <0.24.0-rc.1
Has fix
GoPublished 9 Mar 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-30834
Affects github.com/pinchtab/pinchtab/internal/handlers | Versions >=0.6.0 <0.7.7
Has fix
GoPublished 9 Mar 2026
  • M
Incorrect AuthorizationCVE-2026-29060
Affects github.com/forceu/gokapi/internal/webserver/api | Versions <2.2.3
Has fix
GoPublished 9 Mar 2026
  • M
Authorization Bypass Through User-Controlled KeyCVE-2026-28682
Affects github.com/forceu/gokapi/internal/models | Versions <2.2.3
Has fix
GoPublished 9 Mar 2026
  • C
Directory TraversalCVE-2026-30869
Affects github.com/siyuan-note/siyuan/kernel/server | Versions <3.5.10
Has fix
GoPublished 9 Mar 2026
  • C
Directory TraversalCVE-2026-30869
Affects github.com/siyuan-note/siyuan/kernel/model | Versions <3.5.10
Has fix
GoPublished 9 Mar 2026
  • H
Cross-site Scripting (XSS)CVE-2026-29183
Affects github.com/siyuan-note/siyuan/kernel/util | Versions <3.5.9
Has fix
GoPublished 9 Mar 2026
  • H
Cross-site Scripting (XSS)CVE-2026-29183
Affects github.com/siyuan-note/siyuan/kernel/api | Versions <3.5.9
Has fix
GoPublished 9 Mar 2026
  • H
Cross-site Scripting (XSS)CVE-2026-29183
Affects github.com/siyuan-note/siyuan/kernel/server | Versions <3.5.9
Has fix
GoPublished 9 Mar 2026
  • H
Missing AuthorizationCVE-2026-29073
Affects github.com/siyuan-note/siyuan/kernel/api | Versions >=0.0.0
Has fix
GoPublished 9 Mar 2026
  • H
User ImpersonationCVE-2026-30223
Affects github.com/olivetin/olivetin/service/internal/auth/otjwt | Versions <3000.11.1
Has fix
GoPublished 9 Mar 2026
  • M
Unintended Proxy or Intermediary ('Confused Deputy')CVE-2026-30225
Affects github.com/olivetin/olivetin/service/internal/api | Versions <3000.11.1
Has fix
GoPublished 9 Mar 2026
  • M
Directory TraversalCVE-2026-27139
Affects std/os | Versions <1.25.8>=1.26.0-0 <1.26.1
Has fix
GoPublished 9 Mar 2026
  • M
Cross-site Scripting (XSS)CVE-2026-27142
Affects std/html/template | Versions <1.25.8>=1.26.0-0 <1.26.1
Has fix
GoPublished 9 Mar 2026
  • H
Improper Certificate ValidationCVE-2026-27137
Affects std/crypto/x509 | Versions >=1.26.0-0 <1.26.1
Has fix
GoPublished 9 Mar 2026
  • H
Uncaught ExceptionCVE-2026-27138
Affects std/crypto/x509 | Versions >=1.26.0-0 <1.26.1
Has fix
GoPublished 9 Mar 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-25679
Affects std/net/url | Versions <1.25.8>=1.26.0-0 <1.26.1
Has fix
GoPublished 9 Mar 2026
  • M
Insufficient Session ExpirationCVE-2026-30224
Affects github.com/olivetin/olivetin/service/internal/httpservers | Versions <3000.11.1
Has fix
GoPublished 9 Mar 2026
  • M
Insufficient Session ExpirationCVE-2026-30224
Affects github.com/olivetin/olivetin/service/internal/auth/otoauth2 | Versions <3000.11.1
Has fix
GoPublished 9 Mar 2026