Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-59274
Affects
org.springframework.integration:spring-integration-zip
| Versions
[6.4.0,7.0.6)
[7.1.0,7.1.1)
C
Improper Authentication
CVE-2026-53561
Affects
org.apache.hive:hive-service
| Versions
[,4.2.1)
H
Authorization Bypass Through User-Controlled Key
CVE-2026-54050
Affects
org.sakaiproject.profile2:profile2-api
| Versions
[23.0,]
H
Authorization Bypass Through User-Controlled Key
CVE-2026-54050
Affects
org.sakaiproject.profile2:profile2-impl
| Versions
[23.0,]
M
Arbitrary Code Injection
CVE-2026-49845
Affects
org.apache.hive:hive-standalone-metastore-server
| Versions
[,4.2.1)
M
Server-side Request Forgery (SSRF)
CVE-2026-55976
Affects
org.apache.hive:hive-common
| Versions
[,4.2.1)
M
Server-side Request Forgery (SSRF)
CVE-2026-55976
Affects
org.apache.hive:hive-exec
| Versions
[,4.2.1)
M
Server-side Request Forgery (SSRF)
CVE-2026-77310
Affects
tools.jackson.core:jackson-databind
| Versions
[3.0.0, 3.1.5)
[3.2.0, 3.2.1)
M
Server-side Request Forgery (SSRF)
CVE-2026-77310
Affects
com.fasterxml.jackson.core:jackson-databind
| Versions
[2.0.0, 2.18.9)
[2.19.0, 2.21.5)
[2.22.0, 2.22.1)
M
Improper Neutralization
CVE-2026-76816
Affects
io.netty:netty-codec-mqtt
| Versions
[,4.1.137.Final)
[4.2.0.Final, 4.2.17.Final)
H
Missing Release of Memory after Effective Lifetime
CVE-2026-59295
Affects
io.micrometer:micrometer-core
| Versions
[,1.16.7)
[1.17.0.1,1.17.1)
H
Use of Non-Canonical URL Paths for Authorization Decisions
CVE-2026-15573
Affects
org.keycloak:keycloak-common
| Versions
[,26.7.1)
H
Authorization Bypass Through User-Controlled Key
CVE-2026-16102
Affects
org.keycloak:keycloak-core
| Versions
[,26.7.1)
H
Authorization Bypass Through User-Controlled Key
CVE-2026-16102
Affects
org.keycloak:keycloak-services
| Versions
[,26.7.1)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-16100
Affects
org.keycloak:keycloak-quarkus-server
| Versions
[,26.7.1)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-16100
Affects
org.keycloak:keycloak-server-spi-private
| Versions
[,26.7.1)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-16100
Affects
org.keycloak:keycloak-services
| Versions
[,26.7.1)
M
Improper Authorization
CVE-2026-19608
Affects
org.keycloak:keycloak-authz-policy-common
| Versions
[0,26.8.0)
H
Predictable from Observable State
CVE-2026-15571
Affects
org.keycloak:keycloak-services
| Versions
[,26.7.2)
C
Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-18963
Affects
org.keycloak:keycloak-services
| Versions
[26.0.0,26.7.2)
H
Improper Validation of Certificate with Host Mismatch
CVE-2026-62243
Affects
io.netty:netty-handler
| Versions
[,4.1.137.Final)
[4.2.0.Final,4.2.17.Final)
M
Null Byte Interaction Error (Poison Null Byte)
CVE-2026-62380
Affects
io.netty:netty-codec-socks
| Versions
[,4.1.137.Final)
[4.2.0.Final,4.2.17.Final)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-75140
Affects
org.jsoup:jsoup
| Versions
[,1.23.2)
H
Directory Traversal
CVE-2026-63490
Affects
com.github.jknack:handlebars-springmvc
| Versions
[,4.5.3)
M
Allocation of Resources Without Limits or Throttling
CVE-2026-59323
Affects
io.micrometer:micrometer-tracing-bridge-brave
| Versions
[,1.6.7)
[1.7.0, 1.7.1)
M
Incorrect Authorization
CVE-2026-59318
Affects
org.springframework.ai:spring-ai-model
| Versions
[1.0.0,2.0.1)
L
Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-59308
Affects
org.springframework.ai:spring-ai-redis-semantic-cache
| Versions
[2.0.0,2.0.1)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-59279
Affects
org.springframework.ai:mcp-spring-webflux
| Versions
[2.0.0,2.0.1)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-59279
Affects
org.springframework.ai:mcp-spring-webmvc
| Versions
[2.0.0,2.0.1)
H
CRLF Injection
CVE-2026-59296
Affects
io.micrometer:micrometer-core
| Versions
[,1.16.7)
[1.17.0, 1.17.1)