Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
User Impersonation
CVE-2026-50141
Affects
github.com/woodpecker-ci/woodpecker/server/rpc
| Versions
>=3.0.0 <3.14.1
L
Authorization Bypass Through User-Controlled Key
CVE-2026-11500
Affects
github.com/weaviate/weaviate/usecases/auth/authentication/apikey
| Versions
<1.38.0-rc.0
M
Out-of-bounds Read
CVE-2026-54908
Affects
github.com/pion/dtls/pkg/protocol/handshake
| Versions
>=0.0.0
M
Out-of-bounds Read
CVE-2026-54908
Affects
github.com/pion/dtls/v3/pkg/protocol/handshake
| Versions
<3.1.3
M
Out-of-bounds Read
CVE-2026-54908
Affects
github.com/pion/dtls
| Versions
>=0.0.0
L
Race Condition
CVE-2026-11465
Affects
github.com/songquanpeng/one-api/model
| Versions
>=0.0.0
L
Cross-site Scripting (XSS)
CVE-2026-58371
Affects
github.com/seaweedfs/seaweedfs/weed/server
| Versions
<4.30
H
Directory Traversal
CVE-2026-58372
Affects
github.com/seaweedfs/seaweedfs/weed/server
| Versions
<4.34.0
H
Improper Certificate Validation
CVE-2026-54100
Affects
github.com/openshift/windows-machine-config-operator
| Versions
>=0.0.0
M
Integer Overflow or Wraparound
CVE-2026-10722
Affects
github.com/cilium/ebpf/btf
| Versions
<0.22.0
M
Inefficient Algorithmic Complexity
CVE-2026-53433
Affects
github.com/junegunn/fzf/src
| Versions
<0.73.1
M
Integer Overflow or Wraparound
CVE-2026-53432
Affects
github.com/junegunn/fzf/src/algo
| Versions
<0.73.0
H
Origin Validation Error
CVE-2026-59096
Affects
github.com/dapr/dapr/pkg/sentry/server/oidc
| Versions
<1.17.8
>=1.18.0-rc.1 <1.18.0-rc.5
M
User Impersonation
CVE-2026-45045
Affects
github.com/gofiber/fiber/v3/middleware/proxy
| Versions
<3.3.0
M
User Impersonation
CVE-2026-45045
Affects
github.com/gofiber/fiber/v2/middleware/proxy
| Versions
>=0.0.0
M
User Impersonation
CVE-2026-45045
Affects
github.com/gofiber/fiber/middleware/proxy
| Versions
>=0.0.0
M
Missing Authentication for Critical Function
CVE-2026-49254
Affects
github.com/dragonflyoss/dragonfly/manager/models
| Versions
>=0.0.0
M
Missing Authentication for Critical Function
CVE-2026-49254
Affects
github.com/dragonflyoss/dragonfly/manager/router
| Versions
>=0.0.0
M
Missing Authentication for Critical Function
CVE-2026-49254
Affects
github.com/dragonflyoss/dragonfly2/manager/router
| Versions
<2.4.4-rc.3
M
Missing Authentication for Critical Function
CVE-2026-49254
Affects
github.com/dragonflyoss/dragonfly2/manager/models
| Versions
<2.4.4-rc.3
M
Insufficiently Protected Credentials
CVE-2026-50192
Affects
github.com/kerberos-io/agent/machinery/src/cloud
| Versions
<3.6.26
H
Directory Traversal
CVE-2026-49244
Affects
github.com/drakkan/sftpgo/v2/internal/httpd
| Versions
>=2.2.0 <2.7.3
H
Directory Traversal
CVE-2026-49244
Affects
github.com/drakkan/sftpgo/v2/internal/common
| Versions
>=2.2.0 <2.7.3
L
Cross-site Scripting (XSS)
CVE-2026-49245
Affects
github.com/drakkan/sftpgo/v2/internal/httpd
| Versions
>=2.2.0 <2.7.3
H
Improper Certificate Validation
CVE-2026-50149
Affects
github.com/projectcontour/contour/internal/dag
| Versions
>=1.23.0 <1.33.5
H
Improper Handling of Windows DATA Alternate Data Stream
CVE-2026-52792
Affects
github.com/xyproto/algernon/engine
| Versions
<1.17.9
M
Information Exposure
CVE-2026-44332
Affects
github.com/gofiber/fiber/v3/middleware/basicauth
| Versions
<3.3.0
M
Information Exposure
CVE-2026-44332
Affects
github.com/gofiber/fiber/middleware/basicauth
| Versions
>=0.0.0
M
Information Exposure
CVE-2026-44332
Affects
github.com/gofiber/fiber/v2/middleware/basicauth
| Versions
>=0.0.0
C
Permissive Cross-domain Policy with Untrusted Domains
CVE-2026-9739
Affects
github.com/googleapis/mcp-toolbox/internal/server
| Versions
<1.2.0