Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- H
Integer Overflow or WraparoundCVE-2026-104016
Affects tools.jackson.dataformat:jackson-dataformat-protobuf | Versions [3.2.0,3.2.4)[3.0.0,3.1.8)
Has fix
MavenPublished 28 Oct 2026
- H
Integer Overflow or WraparoundCVE-2026-104016
Affects com.fasterxml.jackson.dataformat:jackson-dataformat-protobuf | Versions [2.22.0, 2.22.3)[2.6.0, 2.18.11)[2.19.0, 2.21.7)
Has fix
MavenPublished 28 Oct 2026
- C
Deserialization of Untrusted DataCVE-2026-110879
Affects tools.jackson.core:jackson-databind | Versions [3.0.0, 3.1.8)[3.2.0, 3.2.4)
Has fix
MavenPublished 28 Oct 2026
- C
Deserialization of Untrusted DataCVE-2026-110879
Affects com.fasterxml.jackson.core:jackson-databind | Versions [2.10.0,2.18.12)[2.19.0,2.21.8)[2.22.0,2.22.4)
Has fix
MavenPublished 28 Oct 2026
- C
Cross-site Scripting (XSS)CVE-2026-116804
Affects org.webjars.npm:dompurify | Versions [3.4.4,3.4.17)
Has fix
MavenPublished 27 Oct 2026
- H
Cross-site Scripting (XSS)CVE-2026-116803
Affects org.webjars.npm:dompurify | Versions [,3.4.17)
Has fix
MavenPublished 27 Oct 2026
- M
Cross-site Scripting (XSS)CVE-2026-116802
Affects org.webjars.npm:dompurify | Versions [,3.4.17)
Has fix
MavenPublished 27 Oct 2026
- M
Arbitrary Code InjectionCVE-2026-116583
Affects org.webjars.npm:seroval | Versions [1.6.0,1.6.11)
Has fix
MavenPublished 27 Oct 2026
- M
Deserialization of Untrusted DataCVE-2026-116580
Affects org.webjars.npm:seroval | Versions [,1.6.8)
Has fix
MavenPublished 27 Oct 2026
- L
Cross-site Scripting (XSS)CVE-2026-116582
Affects org.webjars.npm:seroval | Versions [,1.0.0)[1.5.5,1.6.10)
Has fix
MavenPublished 27 Oct 2026
- H
Improper Handling of Length Parameter InconsistencyCVE-2026-116584
Affects org.webjars.npm:seroval | Versions [1.4.1,1.6.8)
Has fix
MavenPublished 27 Oct 2026
- H
Infinite loopCVE-2026-116581
Affects org.webjars.npm:seroval | Versions [,1.6.8)
Has fix
MavenPublished 27 Oct 2026
- H
Cross-site Scripting (XSS)CVE-2026-116675
Affects org.webjars.npm:tinymce | Versions [7.9.3,8.9.3)
Has fix
MavenPublished 27 Oct 2026
- L
Cross-site Scripting (XSS)CVE-2026-116687
Affects org.webjars.npm:ckeditor5 | Versions [29.0.0,47.7.4)[48.0.0,48.5.1)
Has fix
MavenPublished 27 Oct 2026
- H
Cross-site Scripting (XSS)CVE-2026-116688
Affects org.webjars.npm:ckeditor5 | Versions [45.0.0,47.7.4)[48.0.0,48.5.1)
Has fix
MavenPublished 27 Oct 2026
- L
Permissive Cross-domain Policy with Untrusted DomainsCVE-2026-110737
Affects com.vaadin:vaadin-server-mpr-jakarta | Versions [7.7.36,7.7.55)[8.18.0,8.32.2)
Has fix
MavenPublished 27 Oct 2026
- L
Permissive Cross-domain Policy with Untrusted DomainsCVE-2026-110737
Affects com.vaadin:vaadin-server | Versions [7.1.0,7.7.55)[8.0.0,8.32.2)
Has fix
MavenPublished 27 Oct 2026
- L
Permissive Cross-domain Policy with Untrusted DomainsCVE-2026-110737
Affects com.vaadin:flow-server | Versions [2.13.0,2.13.8)[23.6.0,23.6.16)[24.4.0,24.4.19)[24.5.0,24.7.17)[24.8.0,24.9.29)[24.10.0,24.10.15)[25.0.0,25.1.19)[25.2.0,25.2.13)[25.3.0,25.3.4)
Has fix
MavenPublished 27 Oct 2026
- L
Permissive Cross-domain Policy with Untrusted DomainsCVE-2026-110737
Affects com.vaadin:vaadin-core | Versions [14.14.0,14.14.8)[23.6.0,23.6.17)[24.4.0,24.4.26)[24.5.0,24.7.17)[24.8.0,24.9.24)[24.10.0,24.10.12)[25.0.0,25.2.11)[25.3.0,25.3.3)
Has fix
MavenPublished 27 Oct 2026
- L
Permissive Cross-domain Policy with Untrusted DomainsCVE-2026-110737
Affects com.vaadin:vaadin | Versions [14.14.0,14.14.8)[23.6.0,23.6.17)[24.4.0,24.4.26)[24.5.0,24.7.17)[24.8.0,24.9.24)[24.10.0,24.10.12)[25.0.0,25.2.11)[25.3.0,25.3.3)
Has fix
MavenPublished 27 Oct 2026
- H
Incorrect CalculationCVE-2026-116541
Affects io.netty:netty-tcnative | Versions [,2.0.84.Final)
Has fix
MavenPublished 27 Oct 2026
- H
Incorrect CalculationCVE-2026-116541
Affects io.netty:netty-tcnative-boringssl-static | Versions [,2.0.84.Final)
Has fix
MavenPublished 27 Oct 2026
- C
Out-of-bounds WriteCVE-2026-116539
Affects io.netty:netty-tcnative | Versions [,2.0.84.Final)
Has fix
MavenPublished 27 Oct 2026
- C
Out-of-bounds WriteCVE-2026-116539
Affects io.netty:netty-tcnative-boringssl-static | Versions [,2.0.84.Final)
Has fix
MavenPublished 27 Oct 2026
- M
Improper Handling of Unicode EncodingCVE-2026-116542
Affects io.netty:netty-tcnative-boringssl-static | Versions [,2.0.84.Final)
Has fix
MavenPublished 27 Oct 2026
- M
Improper Handling of Unicode EncodingCVE-2026-116542
Affects io.netty:netty-tcnative | Versions [,2.0.84.Final)
Has fix
MavenPublished 27 Oct 2026
- H
Use After FreeCVE-2026-116540
Affects io.netty:netty-tcnative | Versions [,2.0.84.Final)
Has fix
MavenPublished 27 Oct 2026
- L
Symbolic Name not Mapping to Correct ObjectCVE-2026-116486
Affects org.objenesis:objenesis | Versions [,3.6)
Has fix
MavenPublished 27 Oct 2026
- H
Improper Validation of Array IndexCVE-2026-116590
Affects org.xerial.snappy:snappy-java | Versions [,1.1.10.9)
Has fix
MavenPublished 27 Oct 2026
- M
Interpretation ConflictCVE-2026-116137
Affects org.webjars.npm:adm-zip | Versions [0,]
Has fix
MavenPublished 27 Oct 2026