Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Missing Authentication for Critical Function
Affects github.com/shi-gg/linkdave/cmd/linkdave | Versions <0.1.5
Has fix
GoPublished 10 Mar 2026
  • H
Directory TraversalCVE-2026-29064
Affects github.com/zarf-dev/zarf/src/pkg/archive | Versions >=0.54.0 <0.73.1-rc1
Has fix
GoPublished 10 Mar 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-27600
Affects github.com/sysadminsmedia/homebox/backend/internal/sys/validate | Versions <0.24.0-rc.1
Has fix
GoPublished 10 Mar 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-27600
Affects github.com/sysadminsmedia/homebox/backend/internal/sys/config | Versions <0.24.0-rc.1
Has fix
GoPublished 10 Mar 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-27600
Affects github.com/sysadminsmedia/homebox/backend/internal/core/services | Versions <0.24.0-rc.1
Has fix
GoPublished 10 Mar 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-27600
Affects github.com/sysadminsmedia/homebox/backend/app/api | Versions <0.24.0-rc.1
Has fix
GoPublished 10 Mar 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-27600
Affects github.com/sysadminsmedia/homebox/backend/app/api/handlers/v1 | Versions <0.24.0-rc.1
Has fix
GoPublished 10 Mar 2026
  • M
Arbitrary Argument InjectionCVE-2026-3682
Affects github.com/welovemedia/ffmate/v2/internal/service/ffmpeg | Versions >=2.0.0
Has fix
GoPublished 10 Mar 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-3681
Affects github.com/welovemedia/ffmate/v2/internal/service/webhook | Versions >=2.0.0
Has fix
GoPublished 10 Mar 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-30247
Affects github.com/tencent/weknora/internal/agent/tools | Versions <0.2.12
Has fix
GoPublished 10 Mar 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-30247
Affects github.com/tencent/weknora/internal/utils | Versions <0.2.12
Has fix
GoPublished 10 Mar 2026
  • H
Client-Side Enforcement of Server-Side SecurityCVE-2026-30933
Affects github.com/gtsteffaniak/filebrowser/backend/http | Versions <1.2.2-stable>=1.3.0-beta <1.3.1-beta
Has fix
GoPublished 10 Mar 2026
  • H
Cross-site Scripting (XSS)CVE-2026-30934
Affects github.com/gtsteffaniak/filebrowser/backend/http | Versions <1.2.2-stable>=1.3.0-beta <1.3.1-beta
Has fix
GoPublished 10 Mar 2026
  • M
Cross-site Request Forgery (CSRF)CVE-2026-29084
Affects github.com/forceu/gokapi/internal/webserver/authentication | Versions <2.2.3
Has fix
GoPublished 10 Mar 2026
  • M
Cross-site Request Forgery (CSRF)CVE-2026-29084
Affects github.com/forceu/gokapi/internal/webserver | Versions <2.2.3
Has fix
GoPublished 10 Mar 2026
  • M
Improper Handling of Insufficient Permissions or PrivilegesCVE-2026-29061
Affects github.com/forceu/gokapi/internal/webserver | Versions <2.2.3
Has fix
GoPublished 10 Mar 2026
  • M
Improper Handling of Insufficient Permissions or PrivilegesCVE-2026-29061
Affects github.com/forceu/gokapi/internal/webserver/authentication/tokengeneration | Versions <2.2.3
Has fix
GoPublished 10 Mar 2026
  • C
Missing Authentication for Critical FunctionCVE-2026-27944
Affects github.com/0xjacky/nginx-ui/api/backup | Versions <2.3.3
Has fix
GoPublished 10 Mar 2026
  • M
Cross-site Scripting (XSS)CVE-2026-28683
Affects github.com/forceu/gokapi/internal/configuration/database/provider/redis | Versions <2.2.3
Has fix
GoPublished 10 Mar 2026
  • M
Cross-site Scripting (XSS)CVE-2026-28683
Affects github.com/forceu/gokapi/internal/configuration/database/provider/sqlite | Versions <2.2.3
Has fix
GoPublished 10 Mar 2026
  • M
Cross-site Scripting (XSS)CVE-2026-28683
Affects github.com/forceu/gokapi/internal/storage | Versions <2.2.3
Has fix
GoPublished 10 Mar 2026
  • M
Cross-site Scripting (XSS)CVE-2026-28683
Affects github.com/forceu/gokapi/internal/webserver/headers | Versions <2.2.3
Has fix
GoPublished 10 Mar 2026
  • M
NULL Pointer DereferenceCVE-2026-29781
Affects github.com/bishopfox/sliver/server/handlers | Versions >=0.0.0
Has fix
GoPublished 10 Mar 2026
  • H
Missing AuthorizationCVE-2026-29771
Affects github.com/gravitl/netmaker/controllers | Versions <1.5.1
Has fix
GoPublished 10 Mar 2026
  • M
Cross-site Scripting (XSS)CVE-2026-27616
Affects code.vikunja.io/api/pkg/routes/api/v1 | Versions <2.0.0
Has fix
GoPublished 10 Mar 2026
  • M
Cross-site Scripting (XSS)CVE-2026-27616
Affects github.com/go-vikunja/vikunja/pkg/routes/api/v1 | Versions <2.0.0
Has fix
GoPublished 10 Mar 2026
  • H
Resource InjectionCVE-2026-3288
Affects k8s.io/ingress-nginx/internal/ingress/controller/template | Versions <1.13.8>=1.14.0 <1.14.4
Has fix
GoPublished 10 Mar 2026
  • H
Resource InjectionCVE-2026-3288
Affects github.com/kubernetes/ingress-nginx/internal/ingress/controller/template | Versions <1.13.8>=1.14.0 <1.14.4
Has fix
GoPublished 10 Mar 2026
  • M
Header InjectionCVE-2026-30852
Affects github.com/caddyserver/caddy/v2/modules/caddyhttp | Versions >=2.7.5 <2.11.2
Has fix
GoPublished 10 Mar 2026
  • M
Header InjectionCVE-2026-30852
Affects github.com/caddyserver/caddy/modules/caddyhttp | Versions >=2.7.5 <2.11.2
Has fix
GoPublished 10 Mar 2026