Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Allocation of Resources Without Limits or Throttling
CVE-2026-59323
Affects
io.micrometer:micrometer-tracing-bridge-brave
| Versions
[,1.6.7)
[1.7.0, 1.7.1)
M
Incorrect Authorization
CVE-2026-59318
Affects
org.springframework.ai:spring-ai-model
| Versions
[1.0.0,2.0.1)
L
Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-59308
Affects
org.springframework.ai:spring-ai-redis-semantic-cache
| Versions
[2.0.0,2.0.1)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-59279
Affects
org.springframework.ai:mcp-spring-webflux
| Versions
[2.0.0,2.0.1)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-59279
Affects
org.springframework.ai:mcp-spring-webmvc
| Versions
[2.0.0,2.0.1)
H
CRLF Injection
CVE-2026-59296
Affects
io.micrometer:micrometer-core
| Versions
[,1.16.7)
[1.17.0, 1.17.1)
H
CRLF Injection
CVE-2026-59296
Affects
io.micrometer:micrometer-registry-statsd
| Versions
[,1.16.7)
[1.17.0, 1.17.1)
C
SQL Injection
CVE-2026-76904
Affects
org.geotools.jdbc:gt-jdbc-postgis
| Versions
[30.5,33.6)
[34.0,34.5)
[35.0,35.1)
H
Incorrect Authorization
CVE-2026-18572
Affects
org.keycloak:keycloak-services
| Versions
[0,]
C
Origin Validation Error
CVE-2026-16442
Affects
org.keycloak:keycloak-services
| Versions
[,26.7.1)
H
Missing Authorization
CVE-2026-18201
Affects
org.keycloak:keycloak-services
| Versions
[0,]
H
Replay Attack
CVE-2026-18967
Affects
org.keycloak:keycloak-saml-core
| Versions
[0,]
H
Replay Attack
CVE-2026-18967
Affects
org.keycloak:keycloak-services
| Versions
[0,]
M
Improper Handling of Extra Parameters
CVE-2026-18217
Affects
org.keycloak:keycloak-saml-core
| Versions
[0,]
H
Missing Authorization
CVE-2026-18571
Affects
org.keycloak:keycloak-server-spi-private
| Versions
[0,]
H
Missing Authorization
CVE-2026-18571
Affects
org.keycloak:keycloak-services
| Versions
[0,]
M
Authorization Bypass Through User-Controlled Key
CVE-2026-15945
Affects
org.keycloak:keycloak-services
| Versions
[,26.7.2)
C
Improper Check for Unusual or Exceptional Conditions
CVE-2026-75595
Affects
io.netty:netty-handler
| Versions
[4.2.0.Final,4.2.17.Final)
[,4.1.137.Final)
C
Improper Certificate Validation
CVE-2026-11751
Affects
com.linecorp.armeria:armeria-xds
| Versions
[,1.41.0)
H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-63337
Affects
com.rabbitmq:amqp-client
| Versions
[,5.33.0)
M
Improper Certificate Validation
CVE-2026-63336
Affects
com.rabbitmq:amqp-client
| Versions
[,5.33.0)
M
Improper Check for Unusual or Exceptional Conditions
CVE-2026-63335
Affects
com.rabbitmq:amqp-client
| Versions
[,5.31.0)
H
Memory Allocation with Excessive Size Value
CVE-2026-69219
Affects
com.rabbitmq:amqp-client
| Versions
[,5.33.1)
H
Uncontrolled Recursion
CVE-2026-69220
Affects
com.rabbitmq:amqp-client
| Versions
[,5.33.1)
H
Use of Cache Containing Sensitive Information
CVE-2026-59903
Affects
io.netty:netty-codec-http
| Versions
[,4.1.137.Final)
[4.2.0.Final,4.2.17.Final)
H
Improperly Controlled Sequential Memory Allocation
CVE-2026-59902
Affects
io.netty:netty-transport-sctp
| Versions
[,4.1.137.Final)
[4.2.0.Final,4.2.17.Final)
H
Arbitrary Code Injection
CVE-2026-47686
Affects
org.webjars.npm:vm2
| Versions
[,3.11.6)
H
Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-53659
Affects
org.http4k:http4k-core
| Versions
[,6.49.0.0)
H
Sensitive Cookie with Improper SameSite Attribute
CVE-2026-53660
Affects
org.openidentityplatform.openam:openam-core
| Versions
[,16.1.1)
M
Missing Release of Resource after Effective Lifetime
CVE-2026-64607
Affects
org.apache.httpcomponents.client5:httpclient5
| Versions
[5.0-alpha1,5.6.3)