Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Server-side Request Forgery (SSRF)
CVE-2026-47267
Affects
gogs.io/gogs/internal/httplib
| Versions
<0.14.3-rc.1
H
Server-side Request Forgery (SSRF)
CVE-2026-47267
Affects
gogs.io/gogs/internal/database
| Versions
<0.14.3-rc.1
M
Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-52796
Affects
gogs.io/gogs/internal/markup
| Versions
<0.14.3-rc.1
H
User Impersonation
CVE-2026-25119
Affects
gogs.io/gogs/internal/context
| Versions
<0.14.3-rc.1
H
User Impersonation
CVE-2026-25119
Affects
gogs.io/gogs/internal/conf
| Versions
<0.14.3-rc.1
M
Improper Handling of Exceptional Conditions
CVE-2025-64719
Affects
gogs.io/gogs/internal/route/api/v1/repo
| Versions
<0.14.3-rc.1
M
Improper Handling of Exceptional Conditions
CVE-2025-64719
Affects
gogs.io/gogs/internal/route/repo
| Versions
<0.14.3-rc.1
H
Insufficient Verification of Data Authenticity
CVE-2026-52812
Affects
gogs.io/gogs/internal/lfsutil
| Versions
<0.14.3-rc.1
C
Directory Traversal
CVE-2026-52811
Affects
gogs.io/gogs/internal/database
| Versions
<0.14.3-rc.1
H
Use of a Key Past its Expiration Date
CVE-2026-52809
Affects
gogs.io/gogs/internal/userutil
| Versions
<0.14.3-rc.1
H
Use of a Key Past its Expiration Date
CVE-2026-52809
Affects
gogs.io/gogs/internal/email
| Versions
<0.14.3-rc.1
H
Use of a Key Past its Expiration Date
CVE-2026-52809
Affects
gogs.io/gogs/internal/database
| Versions
<0.14.3-rc.1
C
Relative Path Traversal
CVE-2026-52813
Affects
gogs.io/gogs/internal/repoutil
| Versions
<0.14.3-rc.1
M
Incorrect Authorization
CVE-2026-52808
Affects
gogs.io/gogs/internal/route/api/v1
| Versions
<0.14.3-rc.1
H
Directory Traversal
CVE-2026-52797
Affects
gogs.io/gogs/internal/route/repo
| Versions
>=0.0.0
H
Symlink Attack
CVE-2026-50163
Affects
github.com/oras-project/oras-go/v3/content/file
| Versions
<3.0.0-dev
H
Race Condition
CVE-2026-50139
Affects
goshs.de/goshs/v2/httpserver
| Versions
<2.1.0
M
Missing Authentication for Critical Function
CVE-2026-49254
Affects
d7y.io/dragonfly/v2/manager/router
| Versions
<2.4.4-rc.3
M
Missing Authentication for Critical Function
CVE-2026-49254
Affects
d7y.io/dragonfly/v2/manager/models
| Versions
<2.4.4-rc.3
M
Out-of-bounds Read
CVE-2026-54908
Affects
github.com/pion/dtls/v3
| Versions
<3.1.3
H
User Impersonation
CVE-2026-50141
Affects
go.woodpecker-ci.org/woodpecker/v3/server/rpc
| Versions
<3.14.1
H
Improper Authentication
CVE-2026-58423
Affects
gitea.dev/cmd
| Versions
>=1.23.0 <1.26.3
H
Improper Verification of Cryptographic Signature
CVE-2026-58426
Affects
gitea.dev/routers/actions
| Versions
>=1.22.0 <1.26.2
H
Improper Verification of Cryptographic Signature
CVE-2026-58426
Affects
gitea.dev/routers/api/v1/repo
| Versions
>=1.22.0 <1.26.2
H
Access Control Bypass
CVE-2026-58422
Affects
gitea.dev/services/auth/source/oauth2
| Versions
<1.26.4
H
Access Control Bypass
CVE-2026-58422
Affects
gitea.dev/routers/web/auth
| Versions
<1.26.4
H
Improper Authorization
CVE-2026-58424
Affects
gitea.dev/services/actions
| Versions
<1.26.4
H
Improper Authorization
CVE-2026-58424
Affects
gitea.dev/models/actions
| Versions
<1.26.4
M
Access Control Bypass
CVE-2026-58421
Affects
gitea.dev/models/issues
| Versions
<1.26.4
M
Access Control Bypass
CVE-2026-58421
Affects
gitea.dev/services/issue
| Versions
<1.26.4