Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
Protection Mechanism Failure
CVE-2026-92938
Affects
org.webjars.npm:vm2
| Versions
[3.11.3,3.11.7)
C
Arbitrary Command Injection
CVE-2026-102827
Affects
org.webjars.npm:simple-git
| Versions
[,4.0.0)
H
Origin Validation Error
CVE-2026-102673
Affects
org.webjars.npm:electron
| Versions
[,41.10.4)
[43.0.0-alpha.1,43.0.0)
[42.0.0-alpha.1,42.5.2)
[44.0.0-alpha.1,45.0.0-alpha.10)
M
Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-102672
Affects
org.webjars.npm:electron
| Versions
[42.0.0-alpha.1,42.0.0-beta.2)
[40.0.0-alpha.2,41.10.5)
[,39.8.10)
H
Incorrect Permission Assignment for Critical Resource
CVE-2026-102282
Affects
org.webjars.npm:adm-zip
| Versions
[,0.6.1)
M
Allocation of Resources Without Limits or Throttling
CVE-2026-114103
Affects
org.webjars.npm:adm-zip
| Versions
[,0.6.1)
H
Directory Traversal
CVE-2026-105834
Affects
org.rundeck:rundeck-core
| Versions
[,6.2.0)
H
Directory Traversal
CVE-2026-105834
Affects
org.rundeck:rundeckapp
| Versions
[,6.2.0)
H
Command Injection
CVE-2026-106056
Affects
org.rundeck:rundeck-core
| Versions
[,6.2.0)
H
XML External Entity (XXE) Injection
CVE-2026-92877
Affects
org.glassfish.jaxb:jaxb-core
| Versions
[4.0.0-M4,]
H
XML External Entity (XXE) Injection
CVE-2026-92877
Affects
com.sun.xml.bind:jaxb-osgi
| Versions
[4.0.0-M4,]
H
XML External Entity (XXE) Injection
CVE-2026-92877
Affects
com.sun.xml.bind:jaxb-xjc
| Versions
[4.0.0-M4,]
H
XML External Entity (XXE) Injection
CVE-2026-92877
Affects
org.glassfish.jaxb:xsom
| Versions
[4.0.0-M4,]
C
Session Fixation
CVE-2026-92414
Affects
org.apache.jackrabbit:jackrabbit-webdav
| Versions
[2.20.0,2.20.18)
[2.22.0,2.22.5)
[2.23.0,2.23.6)
M
Expression Language Injection
CVE-2026-93879
Affects
org.hibernate.validator:hibernate-validator
| Versions
[,6.2.6.Final)
[7.0.0.Alpha1,7.0.6.Final)
[8.0.0.Alpha1,8.0.6.Final)
[9.0.0.Beta1,9.0.2.Final)
[9.1.0.Alpha1,9.1.5.Final)
H
Reusing a Nonce, Key Pair in Encryption
CVE-2026-71884
Affects
org.bouncycastle:bcprov-debug-lts8on
| Versions
[,2.73.13)
H
Reusing a Nonce, Key Pair in Encryption
CVE-2026-71884
Affects
org.bouncycastle:bcprov-lts8on
| Versions
[2.73.4,2.73.13)
C
Improper Input Validation
CVE-2026-107726
Affects
com.hazelcast:hazelcast
| Versions
[,5.7.0)
H
Missing Authorization
CVE-2026-107725
Affects
com.hazelcast:hazelcast
| Versions
[,5.7.0)
C
Authentication Bypass by Alternate Name
CVE-2026-76183
Affects
org.apache.tomcat:tomcat
| Versions
[9.0.0.M1, 9.0.122)
[10.1.0-M1, 10.1.60)
[11.0.0-M1, 11.0.26)
M
Double Free
CVE-2026-108104
Affects
org.xerial.snappy:snappy-java
| Versions
[,1.1.10.10)
H
Memory Allocation with Excessive Size Value
CVE-2026-108106
Affects
org.xerial.snappy:snappy-java
| Versions
[,1.1.10.9)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-102554
Affects
com.google.guava:guava
| Versions
[,33.7.2)
(33.7.2-android,33.7.2-jre)
H
Denial of Service (DoS)
CVE-2026-78384
Affects
org.apache.cxf:cxf-core
| Versions
[,3.6.13)
[4.0.0,4.1.9)
[4.2.0,4.2.4)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-61373
Affects
org.apache.thrift:libthrift
| Versions
[,0.25.0)
H
Improper Handling of Exceptional Conditions
CVE-2026-94639
Affects
org.apache.thrift:libthrift
| Versions
[,0.25.0)
H
Improper Handling of Exceptional Conditions
CVE-2026-94651
Affects
org.apache.thrift:libthrift
| Versions
[,0.25.0)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-61374
Affects
org.apache.thrift:libthrift
| Versions
[,0.25.0)
M
Directory Traversal
CVE-2026-104721
Affects
ch.qos.logback:logback-classic
| Versions
[0.9.14,1.6.5)
H
Protection Mechanism Failure
CVE-2026-107226
Affects
org.asynchttpclient:async-http-client
| Versions
[2.1.0,3.0.14)