Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Cross-site Scripting (XSS)
CVE-2026-59710
Affects
org.webjars.npm:showdown
| Versions
[0,]
M
Cross-site Scripting (XSS)
CVE-2026-59711
Affects
org.webjars.npm:showdown
| Versions
[0,]
H
Directory Traversal
CVE-2026-53486
Affects
org.webjars.npm:decompress
| Versions
[0,]
H
Incorrect Implementation of Authentication Algorithm
CVE-2026-54291
Affects
org.postgresql:postgresql
| Versions
[,42.7.12)
H
User Impersonation
CVE-2026-24013
Affects
org.apache.iotdb:iotdb-server
| Versions
[1.3.3,2.0.8)
H
User Impersonation
CVE-2026-24013
Affects
org.apache.iotdb:iotdb-thrift
| Versions
[1.3.3,2.0.8)
H
Deserialization of Untrusted Data
CVE-2026-43867
Affects
org.apache.camel:camel-pqc
| Versions
[4.18.0,4.18.3)
[4.19.0,4.21.0)
H
Directory Traversal
CVE-2026-24014
Affects
org.apache.iotdb:node-commons
| Versions
[1.3.3,2.0.8)
H
Directory Traversal
CVE-2026-24014
Affects
org.apache.iotdb:iotdb-server
| Versions
[1.3.3,2.0.8)
M
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-49098
Affects
org.apache.camel:camel-kafka
| Versions
[4.0.0,4.14.8)
[4.15.0,4.18.3)
[4.19.0,4.21.0)
M
Improper Input Validation
CVE-2026-49086
Affects
org.apache.camel:camel-endpointdsl
| Versions
[4.12.0,4.14.8)
[4.15.0,4.18.3)
[4.19.0,4.21.0)
M
Improper Input Validation
CVE-2026-49086
Affects
org.apache.camel:camel-dapr
| Versions
[4.12.0,4.14.8)
[4.15.0,4.18.3)
[4.19.0,4.21.0)
M
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-49042
Affects
org.apache.camel:camel-spring-ai-tools
| Versions
[4.8.0,4.18.3)
[4.19.0,4.21.0)
M
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-49042
Affects
org.apache.camel:camel-langchain4j-agent
| Versions
[4.8.0,4.18.3)
[4.19.0,4.21.0)
M
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-49042
Affects
org.apache.camel:camel-langchain4j-tools
| Versions
[4.8.0,4.18.3)
[4.19.0,4.21.0)
M
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46587
Affects
org.apache.camel:camel-couchbase
| Versions
[4.0.0,4.14.8)
[4.15.0,4.18.3)
[4.19.0,4.21.0)
M
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46588
Affects
org.apache.camel:camel-couchbase
| Versions
[4.0.0,4.14.8)
[4.15.0,4.18.3)
[4.19.0,4.21.0)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-24012
Affects
org.apache.iotdb:iotdb-server
| Versions
[1.3.3,2.0.8)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-49090
Affects
org.elasticsearch:elasticsearch
| Versions
[,7.17.24)
[8.0.0-alpha1,8.15.0)
M
Allocation of Resources Without Limits or Throttling
CVE-2026-56149
Affects
org.elasticsearch:elasticsearch
| Versions
[8.0.0-alpha1,8.19.17)
[9.0.0-beta1,9.3.6)
[9.4.0,9.4.3)
H
Uncontrolled Recursion
CVE-2026-56148
Affects
org.elasticsearch:elasticsearch
| Versions
[8.0.0-alpha1,8.19.17)
[9.0.0-beta1,9.3.6)
[9.4.0,9.4.3)
M
Server-side Request Forgery (SSRF)
CVE-2026-55993
Affects
org.apache.camel:camel-vertx-websocket
| Versions
[,4.14.8)
[4.15.0,4.18.3)
[4.19.0,4.21.0)
M
Server-side Request Forgery (SSRF)
CVE-2026-55993
Affects
org.apache.camel:camel-iggy
| Versions
[,4.14.8)
[4.15.0,4.18.3)
[4.19.0,4.21.0)
M
Server-side Request Forgery (SSRF)
CVE-2026-55993
Affects
org.apache.camel:camel-atmosphere-websocket
| Versions
[,4.14.8)
[4.15.0,4.18.3)
[4.19.0,4.21.0)
H
Server-side Request Forgery (SSRF)
CVE-2026-55994
Affects
org.apache.camel:camel-vertx-websocket
| Versions
[4.17.0,4.18.3)
[4.19.0,4.21.0)
H
Server-side Request Forgery (SSRF)
CVE-2026-55994
Affects
org.apache.camel:camel-atmosphere-websocket
| Versions
[4.17.0,4.18.3)
[4.19.0,4.21.0)
H
Server-side Request Forgery (SSRF)
CVE-2026-55994
Affects
org.apache.camel:camel-iggy
| Versions
[4.17.0,4.18.3)
[4.19.0,4.21.0)
M
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVE-2026-56140
Affects
org.apache.camel:camel-aws2-sqs
| Versions
[,4.14.8)
[4.15.0,4.18.3)
[4.19.0,4.21.0)
M
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVE-2026-56140
Affects
org.apache.camel:camel-aws2-sns
| Versions
[,4.14.8)
[4.15.0,4.18.3)
[4.19.0,4.21.0)
M
Missing Authorization
CVE-2026-57307
Affects
org.jenkins-ci.plugins:zdevops
| Versions
[0,]