Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Regular Expression Denial of Service (ReDoS)CVE-2026-4867
Affects org.webjars.npm:path-to-regexp | Versions [0,]
Has fix
MavenPublished 27 Mar 2026
  • H
Infinite loopCVE-2026-33750
Affects org.webjars.npm:brace-expansion | Versions [,1.1.13)[2.0.0, 2.0.3)[3.0.0, 3.0.2)[4.0.0 ,5.0.5)
Has fix
MavenPublished 27 Mar 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-33871
Affects io.netty:netty-codec-http2 | Versions [,4.1.132.Final)[4.2.0.Alpha1,4.2.10.Final)
Has fix
MavenPublished 27 Mar 2026
  • H
HTTP Request SmugglingCVE-2026-33870
Affects io.netty:netty-microbench | Versions [,4.1.132.Final)[4.2.0.Alpha1,4.2.12.Final)
Has fix
MavenPublished 27 Mar 2026
  • H
HTTP Request SmugglingCVE-2026-33870
Affects io.netty:netty-codec-http | Versions [,4.1.132.Final)[4.2.0.Alpha1,4.2.12.Final)
Has fix
MavenPublished 27 Mar 2026
  • M
Directory TraversalCVE-2025-70952
Affects org.pf4j:pf4j | Versions [,3.14.1)
Has fix
MavenPublished 26 Mar 2026
  • M
Directory TraversalCVE-2025-67030
Affects org.codehaus.plexus:plexus-utils | Versions [,4.0.3)
Has fix
MavenPublished 26 Mar 2026
  • M
Uncontrolled RecursionCVE-2026-33532
Affects org.webjars.npm:yaml | Versions [,2.8.3)
Has fix
MavenPublished 26 Mar 2026
  • M
Prototype PollutionCVE-2026-33672
Affects org.webjars.npm:picomatch | Versions [0,]
Has fix
MavenPublished 26 Mar 2026
  • H
Regular Expression Denial of Service (ReDoS)CVE-2026-33671
Affects org.webjars.npm:picomatch | Versions [0,]
Has fix
MavenPublished 26 Mar 2026
  • C
Directory TraversalCVE-2026-33166
Affects io.qameta.allure:allure-generator | Versions [,2.38.0)
Has fix
MavenPublished 25 Mar 2026
  • H
Command InjectionCVE-2026-32948
Affects org.scala-sbt:main_2.12 | Versions [, 1.12.7)
Has fix
MavenPublished 25 Mar 2026
  • H
Command InjectionCVE-2026-32948
Affects org.scala-sbt:main_2.11 | Versions [0,]
Has fix
MavenPublished 25 Mar 2026
  • H
Directory TraversalCVE-2026-22739
Affects org.springframework.cloud:spring-cloud-config-server | Versions [,4.3.2)[5.0.0-M1, 5.0.2)
Has fix
MavenPublished 24 Mar 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2026-4258
Affects org.webjars.npm:sjcl | Versions [0,]
Has fix
MavenPublished 23 Mar 2026
  • C
Race ConditionCVE-2026-32887
Affects org.webjars.npm:effect | Versions [0,]
Has fix
MavenPublished 22 Mar 2026
  • M
CRLF Injection
Affects org.webjars.npm:h3 | Versions [1.0.2,]
Has fix
MavenPublished 22 Mar 2026
  • H
Directory Traversal
Affects org.webjars.npm:h3 | Versions [1.0.2,]
Has fix
MavenPublished 22 Mar 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-25534
Affects io.spinnaker.orca:orca-core | Versions [,2025.2.4)[2025.3.0,2025.3.1)[2025.4.0,2025.4.1)
Has fix
MavenPublished 20 Mar 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-25534
Affects io.spinnaker.clouddriver:clouddriver-artifacts | Versions [,2025.2.4)[2025.3.0,2025.3.1)[2025.4.0,2025.4.1)
Has fix
MavenPublished 20 Mar 2026
  • M
Cross-site Scripting (XSS)CVE-2023-1932
Affects org.hibernate:hibernate-validator | Versions [,6.2.0)
Has fix
MavenPublished 20 Mar 2026
  • M
Arbitrary Code InjectionCVE-2025-35036
Affects org.hibernate:hibernate-validator | Versions [,6.2.0.CR1)[7.0.0.Alpha1,7.0.0.CR1)
Has fix
MavenPublished 20 Mar 2026
  • H
Directory TraversalCVE-2026-22737
Affects springframework:spring-webmvc | Versions [0,]
Has fix
MavenPublished 20 Mar 2026
  • H
Directory TraversalCVE-2026-22737
Affects org.springframework:spring-webmvc | Versions [,6.2.17)[7.0.0-M1,7.0.6)
Has fix
MavenPublished 20 Mar 2026
  • H
Directory TraversalCVE-2026-22737
Affects org.springframework:spring-webflux | Versions [,6.2.17)[7.0.0-M1,7.0.6)
Has fix
MavenPublished 20 Mar 2026
  • H
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-22731
Affects org.springframework.boot:spring-boot-actuator | Versions [3.4.0,3.5.12)[4.0.0-M1,4.0.4)
Has fix
MavenPublished 20 Mar 2026
  • H
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-22731
Affects org.springframework.boot:spring-boot-actuator-autoconfigure | Versions [3.4.0,3.5.12)[4.0.0-M1,4.0.4)
Has fix
MavenPublished 20 Mar 2026
  • H
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-22733
Affects org.springframework.boot:spring-boot-actuator | Versions [,3.5.12)[4.0.0-M1,4.0.4)
Has fix
MavenPublished 20 Mar 2026
  • H
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-22733
Affects org.springframework.boot:spring-boot-actuator-autoconfigure | Versions [,3.5.12)[4.0.0-M1,4.0.4)
Has fix
MavenPublished 20 Mar 2026
  • C
Use of Cache Containing Sensitive InformationCVE-2026-22732
Affects org.springframework.security:spring-security-web | Versions [3.2.8,6.5.9)[7.0.0-M1,7.0.4)
Has fix
MavenPublished 20 Mar 2026