Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Improper Validation of Certificate with Host MismatchCVE-2026-40974
Affects org.springframework.boot:spring-boot-autoconfigure | Versions [,3.5.14)[4.0.0-M1,4.0.6)
Has fix
MavenPublished 24 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-41305
Affects org.webjars.npm:postcss | Versions [,8.5.10)
Has fix
MavenPublished 24 Apr 2026
  • M
Information ExposureCVE-2025-62188
Affects org.apache.dolphinscheduler:dolphinscheduler-master | Versions [3.1.0,3.2.0)
Has fix
MavenPublished 23 Apr 2026
  • M
Information ExposureCVE-2025-62188
Affects org.apache.dolphinscheduler:dolphinscheduler-standalone-server | Versions [3.1.0,3.2.0)
Has fix
MavenPublished 23 Apr 2026
  • M
Information ExposureCVE-2025-62188
Affects org.apache.dolphinscheduler:dolphinscheduler-api | Versions [3.1.0,3.2.0)
Has fix
MavenPublished 23 Apr 2026
  • M
Information ExposureCVE-2025-62188
Affects org.apache.dolphinscheduler:dolphinscheduler-worker | Versions [3.1.0,3.2.0)
Has fix
MavenPublished 23 Apr 2026
  • M
Information ExposureCVE-2025-62188
Affects org.apache.dolphinscheduler:dolphinscheduler-alert-server | Versions [3.1.0,3.2.0)
Has fix
MavenPublished 23 Apr 2026
  • H
XML InjectionCVE-2026-41675
Affects org.webjars.npm:xmldom | Versions [0,]
Has fix
MavenPublished 23 Apr 2026
  • H
XML InjectionCVE-2026-41674
Affects org.webjars.npm:xmldom | Versions [0,]
Has fix
MavenPublished 23 Apr 2026
  • M
Missing Critical Step in AuthenticationCVE-2026-40542
Affects org.apache.httpcomponents.client5:httpclient5 | Versions [5.6-alpha1,5.6.1)
Has fix
MavenPublished 23 Apr 2026
  • H
Uncontrolled RecursionCVE-2026-41673
Affects org.webjars.npm:xmldom | Versions [0,]
Has fix
MavenPublished 23 Apr 2026
  • H
Infinite loop
Affects org.webjars.bower:markdown-it | Versions [0,]
Has fix
MavenPublished 23 Apr 2026
  • H
XML InjectionCVE-2026-41672
Affects org.webjars.npm:xmldom | Versions [0,]
Has fix
MavenPublished 23 Apr 2026
  • M
Improper Validation of Specified Index, Position, or Offset in InputCVE-2026-41907
Affects org.webjars.npm:uuid | Versions [,14.0.0)
Has fix
MavenPublished 23 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-41238
Affects org.webjars.npm:dompurify | Versions [3.0.1,3.4.0)
Has fix
MavenPublished 23 Apr 2026
  • L
Cross-site Scripting (XSS)CVE-2026-41239
Affects org.webjars.npm:dompurify | Versions [1.0.10,3.4.0)
Has fix
MavenPublished 23 Apr 2026
  • C
Improper Input ValidationCVE-2026-22752
Affects org.springframework.security:spring-security-oauth2-authorization-server | Versions [1.3.0,1.5.7)[7.0.0-M3,7.0.5)
Has fix
MavenPublished 22 Apr 2026
  • M
Insufficient Verification of Data AuthenticityCVE-2026-22748
Affects org.springframework.security:spring-security-oauth2-jose | Versions [,6.5.10)[7.0.0-M1,7.0.5)
Has fix
MavenPublished 22 Apr 2026
  • H
Access Control BypassCVE-2026-22753
Affects org.springframework.security:spring-security-config | Versions [7.0.0-M1,7.0.5)
Has fix
MavenPublished 22 Apr 2026
  • M
Information ExposureCVE-2026-22746
Affects org.springframework.security:spring-security-core | Versions [,6.5.10)[7.0.0-M1,7.0.5)
Has fix
MavenPublished 22 Apr 2026
  • H
User ImpersonationCVE-2026-22747
Affects org.springframework.security:spring-security-web | Versions [7.0.0-M1,7.0.5)
Has fix
MavenPublished 22 Apr 2026
  • H
Access Control BypassCVE-2026-22754
Affects org.springframework.security:spring-security-config | Versions [7.0.0-M1,7.0.5)
Has fix
MavenPublished 22 Apr 2026
  • M
Time-of-check Time-of-use (TOCTOU) Race ConditionCVE-2026-22751
Affects org.springframework.security:spring-security-core | Versions [6.4.0,6.5.10)[7.0.0-M1,7.0.5)
Has fix
MavenPublished 22 Apr 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-22745
Affects org.springframework:spring-core | Versions [,6.2.18)[7.0.0-M1,7.0.7)
Has fix
MavenPublished 21 Apr 2026
  • H
Incomplete CleanupCVE-2026-22740
Affects org.springframework:spring-web | Versions [,6.2.18)[7.0.0-M1,7.0.7)
Has fix
MavenPublished 21 Apr 2026
  • L
HTTP Request SmugglingCVE-2026-22741
Affects org.springframework:spring-webflux | Versions [,6.2.18)[7.0.0-M1, 7.0.7)
Has fix
MavenPublished 21 Apr 2026
  • L
HTTP Request SmugglingCVE-2026-22741
Affects org.springframework:spring-webmvc | Versions [,6.2.18)[7.0.0-M1, 7.0.7)
Has fix
MavenPublished 21 Apr 2026
  • M
Directory TraversalCVE-2026-41245
Affects com.github.junrar:junrar | Versions [,7.5.10)
Has fix
MavenPublished 21 Apr 2026
  • M
LDAP InjectionCVE-2026-0636
Affects org.bouncycastle:bcprov-jdk14 | Versions [1.74,1.84)
Has fix
MavenPublished 21 Apr 2026
  • M
LDAP InjectionCVE-2026-0636
Affects org.bouncycastle:bcprov-debug-jdk14 | Versions [1.74,1.84)
Has fix
MavenPublished 21 Apr 2026