Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Directory Traversal
CVE-2026-48129
Affects
io.kestra:core
| Versions
[,1.0.43)
[1.1.0,1.1.19)
[1.2.0-rc0,1.2.20)
[1.3.0-rc0,1.3.19)
C
Command Injection
CVE-2026-49869
Affects
io.kestra:kestra
| Versions
[,1.0.45)
[1.1.0,1.3.21)
H
Directory Traversal
CVE-2026-49984
Affects
io.kestra:storage-local
| Versions
[,1.0.45)
[1.1.0,1.3.21)
H
Directory Traversal
CVE-2026-49984
Affects
io.kestra:core
| Versions
[,1.0.45)
[1.1.0,1.3.21)
C
Use of Password Hash With Insufficient Computational Effort
CVE-2026-55069
Affects
io.kestra:core
| Versions
[,1.3.24)
H
Authorization Bypass Through User-Controlled Key
CVE-2026-9099
Affects
org.keycloak:keycloak-services
| Versions
[,26.4.13)
[26.5.0,26.6.4)
M
Directory Traversal
CVE-2026-9083
Affects
org.keycloak:keycloak-services
| Versions
[,26.4.13)
[26.5.0,26.6.4)
M
Directory Traversal
CVE-2026-9083
Affects
org.keycloak.testframework:keycloak-test-framework-core
| Versions
[,26.4.13)
[26.5.0,26.6.4)
M
Insufficient Session Expiration
CVE-2026-9705
Affects
org.keycloak:keycloak-services
| Versions
[,26.4.13)
[26.5.0,26.6.4)
H
Cross-site Scripting (XSS)
CVE-2026-9086
Affects
org.keycloak:keycloak-services
| Versions
[,26.4.13)
[26.5.0,26.6.4)
H
Incorrect Privilege Assignment
CVE-2026-12388
Affects
org.keycloak:keycloak-services
| Versions
[0,]
H
Directory Traversal
CVE-2025-55017
Affects
org.apache.iotdb:iotdb-core
| Versions
[1.0.0,1.3.6)
[2.0.0,2.0.6)
C
Missing Critical Step in Authentication
CVE-2026-57915
Affects
org.apache.kerby:kerb-server
| Versions
[,2.1.2)
H
Directory Traversal
CVE-2025-64152
Affects
org.apache.iotdb:iotdb-core
| Versions
[1.0.0,1.3.6)
[2.0.0,2.0.7)
H
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2026-57914
Affects
org.apache.kerby:kerby-asn1
| Versions
[,2.1.2)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-54399
Affects
org.apache.httpcomponents.core5:httpcore5-h2
| Versions
[,5.4.2)
[5.5-alpha1,5.5-beta1)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-54428
Affects
org.apache.httpcomponents.core5:httpcore5-h2
| Versions
[,5.4.3)
[5.5-alpha1,5.5-beta2)
M
SQL Injection
CVE-2025-53648
Affects
org.apache.gravitino:catalog-jdbc-common
| Versions
[0.5.0,1.0.0)
H
Missing Authorization
CVE-2026-46487
Affects
org.geonetwork-opensource:gn-services
| Versions
[4.0.0-alpha.1,4.2.16)
[4.4.0,4.4.11)
M
Deserialization of Untrusted Data
CVE-2026-55223
Affects
com.mchange:c3p0
| Versions
[,0.14.0)
H
Not Failing Securely ('Failing Open')
CVE-2026-53712
Affects
com.ongres.scram:scram-client
| Versions
[,3.3)
H
Not Failing Securely ('Failing Open')
CVE-2026-53712
Affects
com.ongres.scram:scram-common
| Versions
[,3.3)
H
Deserialization of Untrusted Data
CVE-2026-55153
Affects
com.mchange:mchange-commons-java
| Versions
[,0.6.0)
M
Sensitive Cookie with Improper SameSite Attribute
CVE-2026-55688
Affects
org.asynchttpclient:async-http-client
| Versions
[,2.16.0)
[3.0.0.Beta1,3.0.11)
H
Deserialization of Untrusted Data
CVE-2026-14265
Affects
software.amazon.jdbc:aws-advanced-jdbc-wrapper
| Versions
[3.3.0,4.0.1)
M
Cross-site Scripting (XSS)
CVE-2026-52760
Affects
org.apache.activemq:apache-web-console
| Versions
[,5.19.8)
[6.0.0,6.2.7)
M
Cross-site Scripting (XSS)
CVE-2026-52760
Affects
org.apache.activemq:apache-activemq
| Versions
[,5.19.8)
[6.0.0,6.2.7)
H
Authentication Bypass by Alternate Name
CVE-2026-56091
Affects
org.apache.shiro:shiro-web
| Versions
[2.0.0-alpha-1,3.0.0)
H
Authentication Bypass by Alternate Name
CVE-2026-56091
Affects
org.apache.shiro:shiro-guice
| Versions
[2.0.0-alpha-1,3.0.0)
L
Replay Attack
CVE-2026-56130
Affects
org.apache.shiro:shiro-lang
| Versions
[1.2.4,3.0.0)