Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Directory TraversalCVE-2025-67819
Affects github.com/weaviate/weaviate/entities/diskio | Versions >=1.30.0 <1.30.20>=1.31.0-rc.0 <1.31.19>=1.32.0-rc.0 <1.32.16>=1.33.0-rc.0 <1.33.4
Has fix
GoPublished 14 Dec 2025
  • H
Directory TraversalCVE-2025-67819
Affects github.com/weaviate/weaviate/adapters/repos/db | Versions >=1.30.0 <1.30.20>=1.31.0-rc.0 <1.31.19>=1.32.0-rc.0 <1.32.16>=1.33.0-rc.0 <1.33.4
Has fix
GoPublished 14 Dec 2025
  • L
Deserialization of Untrusted DataCVE-2025-14606
Affects github.com/tiny-craft/tiny-rdm/backend/services | Versions >=0.0.0
Has fix
GoPublished 14 Dec 2025
  • L
Deserialization of Untrusted DataCVE-2025-14606
Affects github.com/tiny-craft/tiny-rdm/backend/utils/convert | Versions >=0.0.0
Has fix
GoPublished 14 Dec 2025
  • H
Improper Certificate ValidationCVE-2025-66001
Affects github.com/neuvector/neuvector/controller/kv | Versions >=5.3.0 <5.4.8
Has fix
GoPublished 14 Dec 2025
  • H
Improper Authorization
Affects github.com/babylonlabs-io/finality-provider/eotsmanager/service | Versions <1.0.4
Has fix
GoPublished 14 Dec 2025
  • H
Improper Authorization
Affects github.com/babylonlabs-io/finality-provider/eotsmanager | Versions <1.0.4
Has fix
GoPublished 14 Dec 2025
  • H
Improper Authorization
Affects github.com/babylonlabs-io/finality-provider/eotsmanager/config | Versions <1.0.4
Has fix
GoPublished 14 Dec 2025
  • M
Arbitrary Command InjectionCVE-2025-67508
Affects github.com/gardener/gardenctl-v2/pkg/provider/credvalidate | Versions <2.12.0
Has fix
GoPublished 12 Dec 2025
  • M
Arbitrary Command InjectionCVE-2025-67508
Affects github.com/gardener/gardenctl-v2/pkg/provider/common/credvalidate | Versions <2.12.0
Has fix
GoPublished 12 Dec 2025
  • M
Arbitrary Command InjectionCVE-2025-67508
Affects github.com/gardener/gardenctl-v2/pkg/provider/common/allowpattern | Versions <2.12.0
Has fix
GoPublished 12 Dec 2025
  • M
Arbitrary Command InjectionCVE-2025-67508
Affects github.com/gardener/gardenctl-v2/pkg/config | Versions <2.12.0
Has fix
GoPublished 12 Dec 2025
  • M
Arbitrary Command InjectionCVE-2025-67508
Affects github.com/gardener/gardenctl-v2/pkg/cmd/providerenv | Versions <2.12.0
Has fix
GoPublished 12 Dec 2025
  • M
Arbitrary Command InjectionCVE-2025-67508
Affects github.com/gardener/gardenctl-v2/internal/client/garden | Versions <2.12.0
Has fix
GoPublished 12 Dec 2025
  • M
Open RedirectCVE-2025-67713
Affects miniflux.app/v2/urlib | Versions <2.2.15
Has fix
GoPublished 12 Dec 2025
  • M
Open RedirectCVE-2025-67713
Affects github.com/miniflux/v2/urlib | Versions <2.2.15
Has fix
GoPublished 12 Dec 2025
  • M
Open RedirectCVE-2025-67713
Affects miniflux.app/v2/internal/ui | Versions <2.2.15
Has fix
GoPublished 12 Dec 2025
  • M
Exposure of Sensitive System Information to an Unauthorized Control SphereCVE-2025-67717
Affects github.com/zitadel/zitadel/internal/query | Versions >=2.44.0 <3.4.5>=4.0.0-rc.1 <4.7.2
Has fix
GoPublished 12 Dec 2025
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2025-64702
Affects github.com/quic-go/quic-go/http3 | Versions <0.57.0
Has fix
GoPublished 12 Dec 2025
  • H
Server-side Request Forgery (SSRF)CVE-2025-59146
Affects github.com/quantumnous/new-api/common | Versions <0.9.0-patch.5
Has fix
GoPublished 11 Dec 2025
  • H
Server-side Request Forgery (SSRF)CVE-2025-59146
Affects github.com/quantumnous/new-api/setting/system_setting | Versions <0.9.0-patch.5
Has fix
GoPublished 11 Dec 2025
  • H
Server-side Request Forgery (SSRF)CVE-2025-59146
Affects github.com/quantumnous/new-api/service | Versions <0.9.0-patch.5
Has fix
GoPublished 11 Dec 2025
  • M
Cross-site Scripting (XSS)CVE-2025-65754
Affects github.com/xyproto/algernon/themes | Versions <1.17.5
Has fix
GoPublished 11 Dec 2025
  • M
Cross-site Request Forgery (CSRF)CVE-2025-34429
Affects github.com/1panel-dev/1panel/core/init/auth | Versions >=1.10.33-lts
Has fix
GoPublished 11 Dec 2025
  • M
Cross-site Request Forgery (CSRF)CVE-2025-34429
Affects github.com/1panel-dev/1panel/core/app/api/v2 | Versions >=1.10.33-lts
Has fix
GoPublished 11 Dec 2025
  • M
Cross-site Request Forgery (CSRF)CVE-2025-34430
Affects github.com/1panel-dev/1panel/core/init/auth | Versions >=1.10.33-lts
Has fix
GoPublished 11 Dec 2025
  • M
Cross-site Request Forgery (CSRF)CVE-2025-34430
Affects github.com/1panel-dev/1panel/core/app/api/v2 | Versions >=1.10.33-lts
Has fix
GoPublished 11 Dec 2025
  • M
Cross-site Request Forgery (CSRF)CVE-2025-34410
Affects github.com/1panel-dev/1panel/core/init/auth | Versions >=1.0.0
Has fix
GoPublished 11 Dec 2025
  • M
Cross-site Request Forgery (CSRF)CVE-2025-34410
Affects github.com/1panel-dev/1panel/core/app/api/v2 | Versions >=1.0.0
Has fix
GoPublished 11 Dec 2025
  • H
Directory TraversalCVE-2025-8110
Affects gogs.io/gogs/internal/route/api/v1/repo | Versions <0.13.4-rc.1
Has fix
GoPublished 11 Dec 2025