Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Permissive Cross-domain Policy with Untrusted DomainsCVE-2026-34200
Affects github.com/nhost/nhost/cli/cmd/mcp/start | Versions <1.41.0
Has fix
GoPublished 7 Apr 2026
  • L
Incorrect AuthorizationCVE-2026-34972
Affects github.com/openfga/openfga/pkg/storage | Versions >=1.8.0 <1.14.0
Has fix
GoPublished 7 Apr 2026
  • C
Regular Expression without AnchorsCVE-2026-34940
Affects github.com/kubeai-project/kubeai/internal/modelcontroller | Versions <0.23.2
Has fix
GoPublished 7 Apr 2026
  • M
Incorrect AuthorizationCVE-2025-68152
Affects github.com/juju/juju/apiserver | Versions <2.9.56>=3.0-beta1 <3.6.20>=4.0-beta1
Has fix
GoPublished 7 Apr 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-33540
Affects github.com/distribution/distribution/v3/registry/proxy | Versions <3.1.0
Has fix
GoPublished 7 Apr 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-33540
Affects github.com/distribution/distribution/v3/internal/client/auth/challenge | Versions <3.1.0
Has fix
GoPublished 7 Apr 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-33540
Affects github.com/distribution/distribution/registry/proxy | Versions <3.1.0
Has fix
GoPublished 7 Apr 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-33540
Affects github.com/distribution/distribution/internal/client/auth/challenge | Versions <3.1.0
Has fix
GoPublished 7 Apr 2026
  • H
Access Control BypassCVE-2026-35172
Affects github.com/distribution/distribution/v3/registry/storage/cache/redis | Versions <3.1.0
Has fix
GoPublished 7 Apr 2026
  • H
Access Control BypassCVE-2026-35172
Affects github.com/distribution/distribution/registry/storage/cache/redis | Versions <3.1.0
Has fix
GoPublished 7 Apr 2026
  • H
Incorrect AuthorizationCVE-2025-68153
Affects github.com/juju/juju/api/client/resources | Versions <2.9.56>=3.0-beta1 <3.6.20>=4.0-beta1
Has fix
GoPublished 7 Apr 2026
  • H
Incorrect AuthorizationCVE-2025-68153
Affects github.com/juju/juju/api | Versions <2.9.56>=3.0-beta1 <3.6.20>=4.0-beta1
Has fix
GoPublished 7 Apr 2026
  • H
Incorrect AuthorizationCVE-2025-68153
Affects github.com/juju/juju/apiserver | Versions <2.9.56>=3.0-beta1 <3.6.20>=4.0-beta1
Has fix
GoPublished 7 Apr 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-33219
Affects github.com/nats-io/nats-server/v2/server | Versions <2.11.15>=2.12.0-RC.1 <2.12.6
Has fix
GoPublished 6 Apr 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-33990
Affects github.com/docker/model-runner/pkg/distribution/oci/remote | Versions <1.1.25
Has fix
GoPublished 6 Apr 2026
  • H
Missing AuthorizationCVE-2026-29073
Affects github.com/siyuan-note/siyuan/kernel/util | Versions <3.6.2
Has fix
GoPublished 6 Apr 2026
  • H
SQL InjectionCVE-2026-33643
Affects github.com/schemahero/schemahero/plugins/mysql/lib | Versions *
No fix available
GoPublished 6 Apr 2026
  • H
SQL InjectionCVE-2026-33643
Affects github.com/schemahero/schemahero/plugins/postgres/lib | Versions *
No fix available
GoPublished 6 Apr 2026
  • M
Unchecked Input for Loop ConditionCVE-2026-33029
Affects github.com/0xjacky/nginx-ui/settings | Versions <2.3.4
Has fix
GoPublished 6 Apr 2026
  • M
Unchecked Input for Loop ConditionCVE-2026-33029
Affects github.com/0xjacky/nginx-ui/internal/cron | Versions <2.3.4
Has fix
GoPublished 6 Apr 2026
  • M
Unchecked Input for Loop ConditionCVE-2026-33029
Affects github.com/0xjacky/nginx-ui/api/settings | Versions <2.3.4
Has fix
GoPublished 6 Apr 2026
  • M
Race ConditionCVE-2026-33028
Affects github.com/0xjacky/nginx-ui/api/settings | Versions <2.3.4
Has fix
GoPublished 6 Apr 2026
  • M
Race ConditionCVE-2026-33028
Affects github.com/0xjacky/nginx-ui/settings | Versions <2.3.4
Has fix
GoPublished 6 Apr 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-33030
Affects github.com/0xjacky/nginx-ui/internal/migrate | Versions <2.3.5
Has fix
GoPublished 6 Apr 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-33030
Affects github.com/0xjacky/nginx-ui/model | Versions <2.3.5
Has fix
GoPublished 6 Apr 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-33030
Affects github.com/0xjacky/nginx-ui/api/certificate | Versions <2.3.5
Has fix
GoPublished 6 Apr 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-33030
Affects github.com/0xjacky/nginx-ui/api/sites | Versions <2.3.5
Has fix
GoPublished 6 Apr 2026
  • H
Improper Validation of Integrity Check ValueCVE-2026-33026
Affects github.com/0xjacky/nginx-ui/internal/backup | Versions <2.3.4
Has fix
GoPublished 6 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-35166
Affects github.com/gohugoio/hugo/markup/goldmark | Versions >=0.60.0 <0.159.2
Has fix
GoPublished 5 Apr 2026
  • H
Missing Encryption of Sensitive DataCVE-2026-34992
Affects antrea.io/antrea/pkg/agent/openflow | Versions <2.4.5>=2.5.0 <2.5.2
Has fix
GoPublished 5 Apr 2026