Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Stored XSSCVE-2026-0858
Affects net.sourceforge.plantuml:plantuml | Versions [,1.2026.0)
Has fix
MavenPublished 15 Jan 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-0600
Affects org.sonatype.nexus.plugins:nexus-blobstore-s3 | Versions [,3.88.0-08)
Has fix
MavenPublished 15 Jan 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-0600
Affects org.sonatype.nexus:nexus-validation | Versions [,3.88.0-08)
Has fix
MavenPublished 15 Jan 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-0600
Affects org.sonatype.nexus:nexus-repository-services | Versions [,3.88.0-08)
Has fix
MavenPublished 15 Jan 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-22036
Affects org.webjars.npm:undici | Versions [0,]
Has fix
MavenPublished 15 Jan 2026
  • M
Cross-site Scripting (XSS)CVE-2026-22787
Affects org.webjars.npm:html2pdf.js | Versions [0,]
Has fix
MavenPublished 15 Jan 2026
  • H
Use of a Broken or Risky Cryptographic AlgorithmCVE-2025-68702
Affects net.gleske:jervis | Versions [,2.2)
Has fix
MavenPublished 15 Jan 2026
  • M
Improper Verification of Cryptographic SignatureCVE-2025-68925
Affects net.gleske:jervis | Versions [,2.2)
Has fix
MavenPublished 15 Jan 2026
  • H
Use of a Broken or Risky Cryptographic AlgorithmCVE-2025-68931
Affects net.gleske:jervis | Versions [,2.2)
Has fix
MavenPublished 15 Jan 2026
  • H
Use of a Broken or Risky Cryptographic AlgorithmCVE-2025-68701
Affects net.gleske:jervis | Versions [,2.2)
Has fix
MavenPublished 15 Jan 2026
  • H
Use of a Broken or Risky Cryptographic AlgorithmCVE-2025-68698
Affects net.gleske:jervis | Versions [,2.2)
Has fix
MavenPublished 15 Jan 2026
  • H
Insecure RandomnessCVE-2025-68704
Affects net.gleske:jervis | Versions [,2.2)
Has fix
MavenPublished 15 Jan 2026
  • H
Inadequate Encryption StrengthCVE-2025-68703
Affects net.gleske:jervis | Versions [,2.2)
Has fix
MavenPublished 15 Jan 2026
  • C
Improper Neutralization of Special Elements in Data Query LogicCVE-2025-66169
Affects org.apache.camel:camel-neo4j | Versions [4.10.0,4.10.8)[4.14.0,4.14.3)[4.15.0,4.17.0)
Has fix
MavenPublished 14 Jan 2026
  • M
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2025-15056
Affects org.webjars.npm:quill | Versions [0,]
Has fix
MavenPublished 14 Jan 2026
  • H
Missing XML ValidationCVE-2025-68493
Affects org.apache.struts:struts2-core | Versions [,6.1.1)
Has fix
MavenPublished 13 Jan 2026
  • M
Cross-site Scripting (XSS)CVE-2025-65110
Affects org.webjars.npm:vega-selections | Versions [0,]
Has fix
MavenPublished 13 Jan 2026
  • M
Cross-site Scripting (XSS)CVE-2025-66648
Affects org.webjars.npm:vega-functions | Versions [5.8.0,]
Has fix
MavenPublished 13 Jan 2026
  • H
Server-side Request Forgery (SSRF)CVE-2025-61916
Affects io.spinnaker.clouddriver:clouddriver-aws | Versions [,2025.1-6)[2025.2.0,2025.2-3)
Has fix
MavenPublished 13 Jan 2026
  • H
Server-side Request Forgery (SSRF)CVE-2025-61916
Affects io.spinnaker.orca:orca-clouddriver | Versions [,2025.1-6)[2025.2.0,2025.2-3)
Has fix
MavenPublished 13 Jan 2026
  • H
XML External Entity (XXE) InjectionCVE-2025-68280
Affects org.apache.sis.core:sis-metadata | Versions [0.4,]
Has fix
MavenPublished 13 Jan 2026
  • H
Directory TraversalCVE-2025-66518
Affects org.apache.kyuubi:kyuubi-server_2.12 | Versions [1.6.0,1.11.0)
Has fix
MavenPublished 13 Jan 2026
  • H
Deserialization of Untrusted DataCVE-2025-10492
Affects net.sf.jasperreports:jasperreports | Versions [0,]
Has fix
MavenPublished 13 Jan 2026
  • C
Improper Neutralization of Special Elements Used in a Template Engine
Affects org.open-metadata:openmetadata-service | Versions [,1.11.4)
Has fix
MavenPublished 11 Jan 2026
  • M
Incorrect Behavior Order: Authorization Before Parsing and CanonicalizationCVE-2026-0707
Affects org.keycloak:keycloak-services | Versions [9.0.0,]
Has fix
MavenPublished 11 Jan 2026
  • C
Access of Resource Using Incompatible Type ('Type Confusion')CVE-2026-22028
Affects org.webjars.npm:preact | Versions [10.26.5,10.26.10)[10.27.0,10.27.3)[10.28.0,10.28.2)
Has fix
MavenPublished 10 Jan 2026
  • H
Unsafe Dependency ResolutionCVE-2025-70974
Affects com.alibaba:fastjson | Versions [,1.2.48)
Has fix
MavenPublished 9 Jan 2026
  • M
Improper Validation of Syntactic Correctness of InputCVE-2025-12543
Affects io.undertow:undertow-core | Versions [,2.3.21.Final)[2.4.0.Alpha1,]
Has fix
MavenPublished 9 Jan 2026
  • H
Cross-site Scripting (XSS)CVE-2026-22029
Affects org.webjars.npm:react-router | Versions [7.0.0,7.12.0)
Has fix
MavenPublished 9 Jan 2026
  • M
Cross-site Request Forgery (CSRF)CVE-2026-22030
Affects org.webjars.npm:react-router | Versions [7.0.0,7.12.0)
Has fix
MavenPublished 9 Jan 2026