Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Improperly Implemented Security Check for StandardCVE-2026-50628
Affects org.apache.cxf:cxf-rt-rs-security-oauth2 | Versions [,4.1.7)[4.2.0,4.2.2)
Has fix
MavenPublished 15 Jun 2026
  • M
Prototype PollutionCVE-2026-12208
Affects org.webjars.npm:jsonata | Versions [0,]
Has fix
MavenPublished 15 Jun 2026
  • M
Cross-site Scripting (XSS)CVE-2026-53722
Affects org.webjars.npm:nuxt | Versions [0,]
Has fix
MavenPublished 15 Jun 2026
  • M
CRLF InjectionCVE-2026-12143
Affects org.webjars.npm:form-data | Versions [0,]
Has fix
MavenPublished 15 Jun 2026
  • M
Cross-site Scripting (XSS)CVE-2026-53606
Affects org.webjars.npm:sanitize-html | Versions [0,]
Has fix
MavenPublished 15 Jun 2026
  • M
Improper Encoding or Escaping of OutputCVE-2026-44311
Affects org.webjars.npm:fabric | Versions [0,]
Has fix
MavenPublished 15 Jun 2026
  • H
Cross-site Scripting (XSS)CVE-2026-53441
Affects org.jenkins-ci.main:jenkins-core | Versions [2.483,2.555.3)[2.556,2.568)
Has fix
MavenPublished 14 Jun 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-47835
Affects org.springframework.ai:spring-ai-vector-store | Versions [,1.0.9)[1.1.0-M1, 1.1.8)
Has fix
MavenPublished 14 Jun 2026
  • M
HTTP Request SmugglingCVE-2026-50020
Affects io.netty:netty-codec-http | Versions [,4.1.135.Final)[4.2.0.Alpha1,4.2.15.Final)
Has fix
MavenPublished 14 Jun 2026
  • M
Insecure RandomnessCVE-2026-50009
Affects io.netty:netty-codec-classes-quic | Versions [4.2.0.Alpha1,4.2.15.Final)
Has fix
MavenPublished 14 Jun 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-50560
Affects io.netty:netty-codec-http2 | Versions [,4.1.135.Final)[4.2.0.Alpha1,4.2.15.Final)
Has fix
MavenPublished 14 Jun 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-48748
Affects io.netty:netty-codec-http3 | Versions [4.2.0.Alpha1,4.2.15.Final)
Has fix
MavenPublished 14 Jun 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-50011
Affects io.netty:netty-codec-redis | Versions [,4.1.135.Final)[4.2.0.Alpha1,4.2.15.Final)
Has fix
MavenPublished 14 Jun 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2026-50010
Affects io.netty:netty-handler | Versions [,4.1.135.Final)[4.2.0.Alpha1,4.2.15.Final)
Has fix
MavenPublished 14 Jun 2026
  • M
Insertion of Sensitive Information into Log FileCVE-2026-45581
Affects org.hyperledger.fabric-chaincode-java:fabric-chaincode-shim | Versions [2.3.1,2.5.10)
Has fix
MavenPublished 12 Jun 2026
  • C
Deserialization of Untrusted DataCVE-2026-50076
Affects org.apache.fory:fory-core | Versions [,1.1.0)
Has fix
MavenPublished 12 Jun 2026
  • M
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')CVE-2026-8759
Affects com.ibeetl:beetl-spring-classic | Versions [,3.21.1.RELEASE)
Has fix
MavenPublished 12 Jun 2026
  • H
Improper Certificate ValidationCVE-2026-45574
Affects com.oviva.telematik:konnektor-client | Versions [,1.2.2)
Has fix
MavenPublished 12 Jun 2026
  • H
Improper Certificate ValidationCVE-2026-45574
Affects com.oviva.telematik:epa4all-vau-client | Versions [,1.2.2)
Has fix
MavenPublished 12 Jun 2026
  • M
XML External Entity (XXE) InjectionCVE-2026-40991
Affects org.springframework.restdocs:spring-restdocs-core | Versions [,3.0.6)[4.0.0-M1,4.0.1)
Has fix
MavenPublished 12 Jun 2026
  • H
Improper Certificate ValidationCVE-2026-45574
Affects com.oviva.telematik:epa4all-client | Versions [,1.2.2)
Has fix
MavenPublished 12 Jun 2026
  • C
Missing Authentication for Critical FunctionCVE-2026-45083
Affects io.goobi.viewer:viewer-core | Versions [4.8.0,26.04.1)
Has fix
MavenPublished 12 Jun 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-41696
Affects org.springframework.data:spring-data-mongodb | Versions [,4.5.12)[5.0.0-M1,5.0.6)
Has fix
MavenPublished 12 Jun 2026
  • H
Deserialization of Untrusted DataCVE-2026-41862
Affects org.springframework.statemachine:spring-statemachine-zookeeper | Versions [,4.0.2)
Has fix
MavenPublished 12 Jun 2026
  • H
Deserialization of Untrusted DataCVE-2026-41862
Affects org.springframework.statemachine:spring-statemachine-samples-datapersist | Versions [,4.0.2)
Has fix
MavenPublished 12 Jun 2026
  • H
Deserialization of Untrusted DataCVE-2026-41862
Affects org.springframework.statemachine:spring-statemachine-kryo | Versions [,4.0.2)
Has fix
MavenPublished 12 Jun 2026
  • H
Deserialization of Untrusted DataCVE-2026-41862
Affects org.springframework.statemachine:spring-statemachine-data-common | Versions [,4.0.2)
Has fix
MavenPublished 12 Jun 2026
  • H
Deserialization of Untrusted DataCVE-2026-41862
Affects org.springframework.statemachine:spring-statemachine-data-redis | Versions [,4.0.2)
Has fix
MavenPublished 12 Jun 2026
  • H
Deserialization of Untrusted DataCVE-2026-41862
Affects org.springframework.statemachine:spring-statemachine-data-mongodb | Versions [,4.0.2)
Has fix
MavenPublished 12 Jun 2026
  • H
Deserialization of Untrusted DataCVE-2026-41862
Affects org.springframework.statemachine:spring-statemachine-data-jpa | Versions [,4.0.2)
Has fix
MavenPublished 12 Jun 2026