Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- H
Buffer OverflowCVE-2023-0996
Affects org.webjars.npm:libheif-js | Versions [,1.15.1)
Has fix
MavenPublished 27 Oct 2026
- M
Improper Encoding or Escaping of OutputCVE-2026-110910
Affects org.webjars.npm:qs | Versions [6.12.0,6.17.0)
Has fix
MavenPublished 27 Oct 2026
- M
Regular Expression Denial of Service (ReDoS)CVE-2026-103885
Affects org.apache.directory.api:api-ldap-model | Versions [2.1.0,2.1.9)
Has fix
MavenPublished 26 Oct 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-108395
Affects io.modelcontextprotocol.sdk:mcp-core | Versions [0.18.0, 0.18.4)[1.0.0, 1.1.4)[2.0.0,2.0.1)
Has fix
MavenPublished 26 Oct 2026
- M
Time-of-check Time-of-use (TOCTOU) Race ConditionCVE-2026-73179
Affects org.apache.cxf:cxf-rt-rs-security-oauth2 | Versions [,3.6.13)[4.1.0,4.1.9)[4.2.0,4.2.4)
Has fix
MavenPublished 26 Oct 2026
- H
Acceptance of Extraneous Untrusted Data With Trusted DataCVE-2026-100227
Affects org.apache.cxf:cxf-rt-rs-security-xml | Versions [,3.6.13)[4.0.0,4.1.9)[4.2.0,4.2.4)
Has fix
MavenPublished 26 Oct 2026
- M
Prototype PollutionCVE-2026-91860
Affects com.vaadin:vaadin-charts-flow | Versions [23.0.0 ,23.6.14)[24.0.0 ,24.9.21)[24.10.0 ,24.10.10)[25.0.0 ,25.1.12)[25.2.0 ,25.2.7)
Has fix
MavenPublished 26 Oct 2026
- M
Prototype PollutionCVE-2026-91860
Affects com.vaadin:vaadin-core | Versions [24.0.0 ,24.9.21)[24.10.0 ,24.10.10)[25.0.0 ,25.1.12)[25.2.0 ,25.2.7)
Has fix
MavenPublished 26 Oct 2026
- M
Prototype PollutionCVE-2026-91860
Affects com.vaadin:vaadin | Versions [23.0.0 ,23.6.14)[24.0.0 ,24.9.21)[24.10.0 ,24.10.10)[25.0.0 ,25.1.12)[25.2.0 ,25.2.7)
Has fix
MavenPublished 26 Oct 2026
- H
Integer Overflow or WraparoundCVE-2026-95616
Affects org.apache.wss4j:wss4j-ws-security-common | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
- L
Replay AttackCVE-2026-92899
Affects org.apache.wss4j:wss4j-ws-security-stax | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
- L
Replay AttackCVE-2026-92899
Affects org.apache.wss4j:wss4j-ws-security-dom | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
- M
Affects org.apache.wss4j:wss4j-ws-security-dom | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
- H
Improperly Implemented Security Check for StandardCVE-2026-92121
Affects org.apache.wss4j:wss4j-ws-security-stax | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
- H
Authentication Bypass by Assumed-Immutable DataCVE-2026-88920
Affects org.apache.wss4j:wss4j-ws-security-dom | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
- H
Improper Verification of Cryptographic SignatureCVE-2026-87830
Affects org.apache.wss4j:wss4j-ws-security-policy-stax | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
Affects org.apache.wss4j:wss4j-ws-security-stax | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
Affects org.apache.wss4j:wss4j-ws-security-common | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
- M
Incomplete CleanupCVE-2026-93446
Affects org.apache.tomcat:tomcat-coyote | Versions [9.0.90,9.0.123)[10.1.25,10.1.61)[11.0.0-M21,11.0.27)
Has fix
MavenPublished 26 Oct 2026
- M
Incomplete CleanupCVE-2026-93446
Affects org.apache.tomcat.embed:tomcat-embed-core | Versions [9.0.90,9.0.123)[10.1.25,10.1.61)[11.0.0-M21,11.0.27)
Has fix
MavenPublished 26 Oct 2026
- M
Incomplete CleanupCVE-2026-93446
Affects org.apache.tomcat.experimental:tomcat-embed-programmatic | Versions [9.0.90,9.0.123)[10.1.25,10.1.61)[11.0.0-M21,11.0.27)
Has fix
MavenPublished 26 Oct 2026
- M
Incomplete CleanupCVE-2026-78437
Affects org.apache.tomcat:tomcat-coyote | Versions [9.0.116,9.0.122)[10.1.53,10.1.60)[11.0.19,11.0.26)
Has fix
MavenPublished 26 Oct 2026
- M
Incomplete CleanupCVE-2026-78437
Affects org.apache.tomcat.embed:tomcat-embed-core | Versions [9.0.116,9.0.122)[10.1.53,10.1.60)[11.0.19,11.0.26)
Has fix
MavenPublished 26 Oct 2026
- M
Incomplete CleanupCVE-2026-78437
Affects org.apache.tomcat.experimental:tomcat-embed-programmatic | Versions [9.0.116,9.0.122)[10.1.53,10.1.60)[11.0.19,11.0.26)
Has fix
MavenPublished 26 Oct 2026
- M
Authentication Bypass by Primary WeaknessCVE-2026-75973
Affects org.apache.tomcat.embed:tomcat-embed-core | Versions [9.0.0.M4,9.0.122)[10.1.0-M1,10.1.60)[11.0.0-M1,11.0.26)
Has fix
MavenPublished 26 Oct 2026
- M
Authentication Bypass by Primary WeaknessCVE-2026-75973
Affects org.apache.tomcat.experimental:tomcat-embed-programmatic | Versions [9.0.0.M4,9.0.122)[10.1.0-M1,10.1.60)[11.0.0-M1,11.0.26)
Has fix
MavenPublished 26 Oct 2026
- M
Authentication Bypass by Primary WeaknessCVE-2026-75973
Affects org.apache.tomcat:tomcat-catalina | Versions [9.0.0.M4,9.0.122)[10.1.0-M1,10.1.60)[11.0.0-M1,11.0.26)
Has fix
MavenPublished 26 Oct 2026
- M
Incorrect SynchronizationCVE-2026-77762
Affects org.apache.tomcat:tomcat-coyote | Versions [9.0.39,9.0.122)[10.1.0-M1,10.1.60)[11.0.0-M1,11.0.26)
Has fix
MavenPublished 26 Oct 2026
- M
Incorrect SynchronizationCVE-2026-77762
Affects org.apache.tomcat.embed:tomcat-embed-core | Versions [9.0.39,9.0.122)[10.1.0-M1,10.1.60)[11.0.0-M1,11.0.26)
Has fix
MavenPublished 26 Oct 2026
- M
Incorrect SynchronizationCVE-2026-77762
Affects org.apache.tomcat.experimental:tomcat-embed-programmatic | Versions [9.0.39,9.0.122)[10.1.0-M1,10.1.60)[11.0.0-M1,11.0.26)
Has fix
MavenPublished 26 Oct 2026