Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • M
Incorrect Authorization		github.com/mattermost/mattermost/server/public/model>=9.11.0 <9.11.12>=10.5.0 <10.5.3Go23 May 2025
  • H
Incorrect Permission Assignment for Critical Resource		github.com/grafana/grafana/pkg/services/org/orgimpl<10.4.19>=11.0.0 <11.2.10>=11.3.0 <11.3.7>=11.4.0 <11.4.5>=11.5.0 <11.5.5>=11.6.0 <11.6.2>=12.0.0 <12.0.1Go23 May 2025
  • M
Directory Traversal		github.com/grafana/grafana/pkg/api/pluginproxy<10.4.17+security-01>=11.0.0 <11.2.8+security-01>=11.3.0 <11.3.5+security-01>=11.4.0 <11.4.3+security-01>=11.5.0 <11.5.3+security-01>=11.6.0 <11.6.0+security-01Go23 May 2025
  • M
Cross-site Scripting (XSS)		github.com/grafana/grafana/pkg/api/static<10.4.19>=11.0.0 <11.2.10>=11.3.0 <11.3.7>=11.4.0 <11.4.5>=11.5.0 <11.5.5>=11.6.0 <11.6.2>=12.0.0 <12.0.1Go23 May 2025
  • M
Exposure of Sensitive System Information to an Unauthorized Control Sphere		github.com/elastic/elastic-agent/internal/pkg/agent/application<8.15.0Go23 May 2025
  • M
Inclusion of Functionality from Untrusted Control Sphere		github.com/elastic/beats/v7<7.17.25>=8.0.0-alpha1 <8.15.4Go23 May 2025
  • M
Inclusion of Functionality from Untrusted Control Sphere		github.com/elastic/elastic-agent<8.15.4Go23 May 2025
  • M
Inclusion of Functionality from Untrusted Control Sphere		github.com/elastic/beats<7.17.25>=8.0.0-alpha1 <8.15.4Go23 May 2025
  • H
Improper Validation of Array Index		github.com/gofiber/fiber/v2/internal/schema>=2.52.6 <2.52.7Go23 May 2025
  • H
Improper Validation of Array Index		github.com/gofiber/fiber/v3/internal/schema>=3.0.0-beta.2 <3.0.0-beta.4Go23 May 2025
  • H
Improper Validation of Array Index		github.com/gofiber/fiber/internal/schema>=2.52.6 <2.52.7>=3.0.0-beta.2 <3.0.0-beta.4Go23 May 2025
  • M
Incorrect Privilege Assignment		github.com/containerd/containerd/v2/core/runtime/v2>=2.0.1 <2.0.5>=2.1.0-beta.0 <2.1.0Go22 May 2025
  • M
Incorrect Privilege Assignment		github.com/containerd/containerd/v2/plugins/cri/images>=2.0.1 <2.0.5>=2.1.0-beta.0 <2.1.0Go22 May 2025
  • M
Cross-site Scripting (XSS)		github.com/lf-edge/ekuiper/internal/server<2.0.1Go21 May 2025
  • M
Cross-site Scripting (XSS)		github.com/lf-edge/ekuiper/v2/internal/server<2.0.1Go21 May 2025
  • L
Improper Neutralization of Escape, Meta, or Control Sequences		github.com/cilium/cilium/hubble/pkg/printer<1.17.2Go21 May 2025
  • M
Incorrect Authorization		github.com/mattermost/mattermost/server/channels/store/timerlayer>=9.11.0 <9.11.12>=10.5.0 <10.5.3Go21 May 2025
  • M
Incorrect Authorization		github.com/mattermost/mattermost/server/channels/store>=9.11.0 <9.11.12>=10.5.0 <10.5.3Go21 May 2025
  • M
Incorrect Authorization		github.com/mattermost/mattermost/server/channels/store/sqlstore>=9.11.0 <9.11.12>=10.5.0 <10.5.3Go21 May 2025
  • M
Incorrect Authorization		github.com/mattermost/mattermost/server/channels/store/retrylayer>=9.11.0 <9.11.12>=10.5.0 <10.5.3Go21 May 2025
  • M
Incorrect Authorization		github.com/mattermost/mattermost/server/channels/app>=9.11.0 <9.11.12>=10.5.0 <10.5.3Go21 May 2025
  • M
Incorrect Authorization		github.com/mattermost/mattermost/server/channels/api4>=9.11.0 <9.11.12>=10.5.0 <10.5.3Go21 May 2025
  • M
Overly Restrictive Account Lockout Mechanism		github.com/mattermost/mattermost/server/public/model>=9.11.0 <9.11.12>=10.4.0 <10.4.5>=10.5.0 <10.5.3>=10.6.0 <10.6.2Go21 May 2025
  • M
Overly Restrictive Account Lockout Mechanism		github.com/mattermost/mattermost/server/channels/app>=9.11.0 <9.11.12>=10.4.0 <10.4.5>=10.5.0 <10.5.3>=10.6.0 <10.6.2Go21 May 2025
  • M
Overly Restrictive Account Lockout Mechanism		github.com/mattermost/mattermost/server/channels/api4>=9.11.0 <9.11.12>=10.4.0 <10.4.5>=10.5.0 <10.5.3>=10.6.0 <10.6.2Go21 May 2025
  • C
Time-of-check Time-of-use (TOCTOU) Race Condition		github.com/containerd/containerd/pkg/archive>=2.1.0 <2.1.1Go21 May 2025
  • C
Time-of-check Time-of-use (TOCTOU) Race Condition		github.com/containerd/containerd/v2/pkg/archive>=2.1.0 <2.1.1Go21 May 2025
  • M
Timing Attack		github.com/mattermost/mattermost-plugin-msteams/server<2.1.1Go16 May 2025
  • M
Cross-site Request Forgery (CSRF)		github.com/justinas/nosurf<1.2.0Go15 May 2025
  • M
Cross-site Scripting (XSS)		github.com/songquanpeng/one-api/controller>=0.0.0Go14 May 2025