Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-19863
Affects
org.eclipse.jetty:jetty-ethereum
| Versions
[12.1.0-alpha0,12.1.13)
M
Incorrect Authorization
CVE-2026-18662
Affects
org.eclipse.jetty:jetty-security
| Versions
[7.6.13, 9.4.65)
[10.0.0, 10.0.33)
[11.0.0, 11.0.33)
M
Incorrect Authorization
CVE-2026-18662
Affects
org.eclipse.jetty.ee9:jetty-ee9-security
| Versions
[12.0.0-alpha0, 12.0.39)
[12.1.0-alpha0, 12.1.12)
M
Incorrect Authorization
CVE-2026-18662
Affects
org.eclipse.jetty.ee8:jetty-ee8-security
| Versions
[12.0.0-alpha0, 12.0.39)
[12.1.0-alpha0, 12.1.12)
M
Incorrect Authorization
CVE-2026-18662
Affects
org.eclipse.jetty.ee11:jetty-ee11-servlet
| Versions
[12.0.0-alpha0, 12.0.39)
[12.1.0-alpha0, 12.1.12)
M
Incorrect Authorization
CVE-2026-18662
Affects
org.eclipse.jetty.ee10:jetty-ee10-servlets
| Versions
[12.0.0-alpha0, 12.0.39)
[12.1.0-alpha0, 12.1.12)
M
Cleartext Storage of Sensitive Information
CVE-2026-19864
Affects
org.eclipse.jetty:jetty-client
| Versions
[9.4.0-alpha0, 9.4.65)
[10.0.0-alpha0, 10.0.33)
[11.0.0-alpha0, 11.0.33)
[12.0.0-alpha0, 12.0.39)
[12.1.0-alpha0, 12.1.13)
M
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-76182
Affects
org.eclipse.jetty:jetty-server
| Versions
[12.0.0-alpha0, 12.0.39)
[12.1.0-alpha0, 12.1.12)
M
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-76182
Affects
org.eclipse.jetty.fcgi:fcgi-server
| Versions
[9.4.0-alpha0, 9.4.65)
[10.0.0-alpha0, 10.0.33)
[11.0.0-alpha0, 11.0.33)
M
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-76182
Affects
org.eclipse.jetty.ee9:jetty-ee9-fcgi-proxy
| Versions
[12.0.0-alpha0, 12.0.39)
[12.1.0-alpha0, 12.1.12)
M
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-76182
Affects
org.eclipse.jetty.ee11:jetty-ee11-fcgi-proxy
| Versions
[12.0.0-alpha0, 12.0.39)
[12.1.0-alpha0, 12.1.12)
M
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-76182
Affects
org.eclipse.jetty.ee10:jetty-ee10-fcgi-proxy
| Versions
[12.0.0-alpha0, 12.0.39)
[12.1.0-alpha0, 12.1.12)
H
Information Exposure
CVE-2026-76184
Affects
org.eclipse.jetty:jetty-client
| Versions
[9.4.0-alpha0, 9.4.65)
[10.0.0-alpha0, 10.0.33)
[11.0.0-alpha0, 11.0.33)
[12.0.0-alpha0, 12.0.39)
[12.1.0-alpha0, 12.1.13)
H
Information Exposure
CVE-2026-77711
Affects
org.eclipse.jetty:jetty-client
| Versions
[9.4.0-alpha0, 9.4.65)
[10.0.0-alpha0, 10.0.33)
[11.0.0-alpha0, 11.0.33)
[12.0.0-alpha0, 12.0.39)
[12.1.0-alpha0, 12.1.13)
H
XML External Entity (XXE) Injection
Affects
com.itextpdf:layout
| Versions
[,7.1.16)
L
Timing Attack
Affects
io.jsonwebtoken:jjwt
| Versions
[,0.6.0)
H
Relative Path Traversal
Affects
com.jayway.restassured:rest-assured
| Versions
[2.3.3,]
H
Relative Path Traversal
Affects
io.rest-assured:rest-assured
| Versions
[,5.2.0)
M
Cross-site Request Forgery (CSRF)
CVE-2026-106708
Affects
com.xuxueli:xxl-job-admin
| Versions
[0,]
M
Cross-site Scripting (XSS)
CVE-2026-106706
Affects
com.xuxueli:xxl-job-admin
| Versions
[0,]
M
Cross-site Scripting (XSS)
CVE-2026-106707
Affects
com.xuxueli:xxl-job-admin
| Versions
[0,]
H
Infinite loop
CVE-2026-97370
Affects
com.github.junrar:junrar
| Versions
[,7.6.1)
H
Denial of Service (DoS)
CVE-2026-68498
Affects
tools.jackson.core:jackson-core
| Versions
[3.0.0,3.1.6)
[3.2.0,3.2.2)
H
Denial of Service (DoS)
CVE-2026-68498
Affects
com.fasterxml.jackson.core:jackson-core
| Versions
[2.16.0,2.18.10)
[2.19.0,2.21.6)
[2.22.0,2.22.2)
M
Uncaught Exception
Affects
commons-validator:commons-validator
| Versions
[,1.3.1)
H
Improper Verification of Cryptographic Signature
Affects
io.jsonwebtoken:jjwt
| Versions
[0,]
H
Improper Verification of Cryptographic Signature
Affects
io.jsonwebtoken:jjwt-impl
| Versions
[,0.12.0)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-102467
Affects
io.vertx:vertx-core
| Versions
[4.0.0,4.5.35)
[5.0.0,5.1.9)
[5.2.0,5.2.1)
H
Incorrect Authorization
CVE-2026-102460
Affects
io.vertx:vertx-web
| Versions
[4.0.0,4.5.35)
[5.0.0,5.1.9)
[5.2.0,5.2.1)
M
Inefficient Algorithmic Complexity
CVE-2026-110871
Affects
org.webjars.npm:nodemailer
| Versions
[4.6.5,]