Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Directory TraversalCVE-2026-26960
Affects org.webjars.npm:tar | Versions [0,]
Has fix
MavenPublished 18 Feb 2026
  • H
Improper Handling of Highly Compressed Data (Data Amplification)CVE-2026-2575
Affects org.keycloak:keycloak-services | Versions [1.9.0.CR1,]
Has fix
MavenPublished 17 Feb 2026
  • H
Improper Handling of Highly Compressed Data (Data Amplification)CVE-2026-2575
Affects org.keycloak:keycloak-saml-adapter-core | Versions [1.9.0.CR1,]
Has fix
MavenPublished 17 Feb 2026
  • H
Improper Handling of Highly Compressed Data (Data Amplification)CVE-2026-2575
Affects org.keycloak:keycloak-saml-core | Versions [1.9.0.CR1,]
Has fix
MavenPublished 17 Feb 2026
  • M
Regular Expression Denial of Service (ReDoS)CVE-2026-2327
Affects org.webjars.npm:markdown-it | Versions [13.0.1,]
Has fix
MavenPublished 17 Feb 2026
  • H
Missing AuthorizationCVE-2026-25903
Affects org.apache.nifi:nifi-web-api | Versions [1.1.0,2.8.0)
Has fix
MavenPublished 17 Feb 2026
  • H
Arbitrary Code InjectionCVE-2025-33042
Affects org.apache.avro:avro-compiler | Versions [,1.11.5)[1.12.0,1.12.1)
Has fix
MavenPublished 15 Feb 2026
  • C
Improper Validation of Certificate with Host MismatchCVE-2026-26214
Affects com.xiaomi.infra.galaxy:galaxy-fds-sdk-android | Versions [0,]
Has fix
MavenPublished 15 Feb 2026
  • H
Denial of Service (DoS)CVE-2025-70886
Affects run.halo.app:api | Versions [0,]
Has fix
MavenPublished 15 Feb 2026
  • L
Authorization Bypass Through User-Controlled KeyCVE-2026-2366
Affects org.keycloak:keycloak-services | Versions [0,]
Has fix
MavenPublished 13 Feb 2026
  • M
Improper Restriction of Rendered UI Layers or FramesCVE-2026-26000
Affects org.xwiki.platform:xwiki-platform-web-war | Versions [,17.4.6)
Has fix
MavenPublished 13 Feb 2026
  • M
Improper Restriction of Rendered UI Layers or FramesCVE-2026-26000
Affects org.xwiki.platform:xwiki-platform-url-default | Versions [,17.4.6)
Has fix
MavenPublished 13 Feb 2026
  • M
Improper Restriction of Rendered UI Layers or FramesCVE-2026-26000
Affects org.xwiki.platform:xwiki-platform-url-api | Versions [,17.4.6)
Has fix
MavenPublished 13 Feb 2026
  • H
Regular Expression Denial of Service (ReDoS)CVE-2025-69873
Affects org.webjars.npm:ajv | Versions [0,]
Has fix
MavenPublished 13 Feb 2026
  • H
Insertion of Sensitive Information Into Sent DataCVE-2026-26010
Affects org.open-metadata:openmetadata-service | Versions [,1.11.8)
Has fix
MavenPublished 12 Feb 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-2391
Affects org.webjars.npm:qs | Versions [0,]
Has fix
MavenPublished 12 Feb 2026
  • M
Improper Output Neutralization for LogsCVE-2025-11537
Affects io.quarkus:quarkus-vertx-http | Versions [,3.27.2)[3.28.0.CR1,3.29.1)
Has fix
MavenPublished 11 Feb 2026
  • C
Missing AuthenticationCVE-2026-23906
Affects org.apache.druid.extensions:druid-basic-security | Versions [0.17.0,36.0.0)
Has fix
MavenPublished 11 Feb 2026
  • M
Authentication Bypass by Alternate NameCVE-2026-23903
Affects org.apache.shiro:shiro-core | Versions [,2.1.0)
Has fix
MavenPublished 10 Feb 2026
  • L
Timing AttackCVE-2026-23901
Affects org.apache.shiro:shiro-core | Versions [,2.1.0)
Has fix
MavenPublished 10 Feb 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2026-1529
Affects org.keycloak:keycloak-services | Versions [,26.5.3)
Has fix
MavenPublished 10 Feb 2026
  • H
Improper Restriction of Security Token AssignmentCVE-2026-1609
Affects org.keycloak:keycloak-services | Versions [26.5.2,26.5.3)
Has fix
MavenPublished 10 Feb 2026
  • H
Improperly Implemented Security Check for StandardCVE-2026-1486
Affects org.keycloak:keycloak-services | Versions [,26.5.3)
Has fix
MavenPublished 10 Feb 2026
  • M
Incorrect Privilege AssignmentCVE-2025-14778
Affects org.keycloak:keycloak-services | Versions [,26.5.3)
Has fix
MavenPublished 10 Feb 2026
  • H
Prototype PollutionCVE-2026-25639
Affects org.webjars.npm:axios | Versions [,1.13.5)
Has fix
MavenPublished 10 Feb 2026
  • M
Cross-site Scripting (XSS)CVE-2026-25581
Affects org.webjars.npm:sceditor | Versions [0,]
Has fix
MavenPublished 9 Feb 2026
  • M
Directory TraversalCVE-2026-2111
Affects org.jeecgframework.boot:jeecg-boot-base-core | Versions [,3.9.1)
Has fix
MavenPublished 9 Feb 2026
  • L
Improper Output Neutralization for LogsCVE-2026-1337
Affects org.neo4j:neo4j | Versions [,2026.01.3)
Has fix
MavenPublished 8 Feb 2026
  • L
Server-side Request Forgery (SSRF)CVE-2025-68157
Affects org.webjars.npm:webpack | Versions [5.75.0,]
Has fix
MavenPublished 6 Feb 2026
  • L
Server-side Request Forgery (SSRF)CVE-2025-68458
Affects org.webjars.npm:webpack | Versions [5.75.0,]
Has fix
MavenPublished 6 Feb 2026