Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Improper Handling of Length Parameter Inconsistency
CVE-2026-87022
Affects
org.apache.tomcat.embed:tomcat-embed-websocket
| Versions
[9.0.0.M1,9.0.122)
[10.1.0-M1,10.1.60)
[11.0.0-M1,11.0.26)
M
Improper Handling of Length Parameter Inconsistency
CVE-2026-87022
Affects
org.apache.tomcat:tomcat-websocket
| Versions
[9.0.0.M1,9.0.122)
[10.1.0-M1,10.1.60)
[11.0.0-M1,11.0.26)
C
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVE-2026-104711
Affects
org.apache.struts:struts2-core
| Versions
[2.0.0,6.12.0)
[7.0.0,7.4.0)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-94029
Affects
org.apache.sshd:sshd-sftp
| Versions
[1.0.0,2.20.0)
[3.0.0-M1,3.0.0-M6)
M
Improperly Controlled Sequential Memory Allocation
CVE-2026-94002
Affects
org.apache.sshd:sshd-sftp
| Versions
[0.9.0,2.20.0)
[3.0.0-M1,3.0.0-M6)
H
Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-102477
Affects
io.vertx:vertx-grpc-server
| Versions
[4.0.0, 4.5.35)
[5.0.0, 5.1.10)
[5.2.0, 5.2.1)
M
Execution After Redirect (EAR)
CVE-2026-74049
Affects
org.apache.tomcat:tomcat-jasper
| Versions
[9.0.0-M1 ,9.0.123)
[10.1.0-M1 ,10.1.61)
[11.0.0-M1 ,11.0.27)
M
Not Failing Securely ('Failing Open')
CVE-2026-74048
Affects
org.apache.tomcat.embed:tomcat-embed-core
| Versions
[9.0.92,9.0.123)
[10.1.22,10.1.61)
[11.0.0-M14,11.0.27)
M
Not Failing Securely ('Failing Open')
CVE-2026-74048
Affects
org.apache.tomcat:tomcat-catalina
| Versions
[9.0.92,9.0.123)
[10.1.22,10.1.61)
[11.0.0-M14,11.0.27)
M
Incomplete Cleanup
CVE-2026-88041
Affects
org.apache.tomcat.embed:tomcat-embed-core
| Versions
[9.0.92,9.0.123)
[10.1.27,10.1.61)
[11.0.0-M23,11.0.27)
M
Incomplete Cleanup
CVE-2026-88041
Affects
org.apache.tomcat:tomcat-coyote
| Versions
[9.0.92,9.0.123)
[10.1.27,10.1.61)
[11.0.0-M23,11.0.27)
M
Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-80353
Affects
org.apache.tomcat.embed:tomcat-embed-core
| Versions
[9.0.47,9.0.123)
M
Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-80353
Affects
org.apache.tomcat:tomcat-util
| Versions
[9.0.47,9.0.123)
C
Access Control Bypass
CVE-2026-101356
Affects
org.apache.tomcat.embed:tomcat-embed-core
| Versions
[9.0.118,9.0.123)
[10.1.55,10.1.61)
[11.0.22,11.0.27)
C
Access Control Bypass
CVE-2026-101356
Affects
org.apache.tomcat:tomcat-coyote
| Versions
[9.0.118,9.0.123)
[10.1.55,10.1.61)
[11.0.22,11.0.27)
C
Missing Critical Step in Authentication
CVE-2026-101296
Affects
org.apache.tomcat.embed:tomcat-embed-core
| Versions
[11.0.0-M1,11.0.27)
[10.1.0-M1,10.1.61)
[9.0.0.M1,9.0.123)
C
Missing Critical Step in Authentication
CVE-2026-101296
Affects
org.apache.tomcat:tomcat-catalina
| Versions
[11.0.0-M1,11.0.27)
[10.1.0-M1,10.1.61)
[9.0.0.M1,9.0.123)
M
Buffer Under-read
CVE-2026-103119
Affects
org.apache.tomcat.embed:tomcat-embed-core
| Versions
[11.0.0-M25,11.0.27)
M
Buffer Under-read
CVE-2026-103119
Affects
org.apache.tomcat:tomcat-catalina
| Versions
[11.0.0-M25,11.0.27)
H
Improper Validation of Consistency within Input
CVE-2026-15943
Affects
org.keycloak:keycloak-server-spi
| Versions
[2.4.0.CR1,26.8.1)
H
Arbitrary Code Injection
CVE-2026-115895
Affects
org.webjars.npm:happy-dom
| Versions
[17.0.0,21.0.4)
H
Cross-site Scripting (XSS)
CVE-2026-107588
Affects
com.vaadin:vaadin-charts-flow-svg-generator
| Versions
[21.0.0,23.6.16)
[24.0.0,24.4.24)
[24.5.0,24.7.15)
[24.8.0,24.9.23)
[24.10.0,24.10.11)
[25.0.0,25.2.10)
[25.3.0,25.3.1)
H
Cross-site Scripting (XSS)
CVE-2026-107588
Affects
com.vaadin:vaadin-charts-flow
| Versions
[22.0.0,23.6.16)
[24.0.0,24.4.24)
[24.5.0,24.7.15)
[24.8.0,24.9.23)
[24.10.0,24.10.11)
[25.0.0,25.2.10)
[25.3.0,25.3.1)
H
Cross-site Scripting (XSS)
CVE-2026-107588
Affects
com.vaadin:vaadin
| Versions
[22.0.0,23.6.16)
[24.0.0,24.4.24)
[24.5.0,24.7.16)
[24.8.0,24.9.23)
[24.10.0,24.10.11)
[25.0.0,25.2.10)
[25.3.0,25.3.1)
H
Improper Locking
CVE-2026-110803
Affects
com.vaadin:vaadin-server-mpr-jakarta
| Versions
[8.18.0,8.32.2)
H
Improper Locking
CVE-2026-110803
Affects
com.vaadin:vaadin-server
| Versions
[8.16.0,8.32.2)
M
Cross-site Scripting (XSS)
CVE-2016-20102
Affects
net.bull.javamelody:javamelody-core
| Versions
[,1.60.0)
H
Directory Traversal
CVE-2026-79986
Affects
org.apache.camel:camel-azure-files
| Versions
[4.0.0,4.18.5)
[4.19.0,4.22.1)
H
Directory Traversal
CVE-2026-79983
Affects
org.apache.camel:camel-ftp
| Versions
[4.0.0,4.18.5)
[4.19.0,4.22.1)
H
Directory Traversal
CVE-2026-79984
Affects
org.apache.camel:camel-mina-sftp
| Versions
[4.18.0,4.18.5)
[4.19.0,4.22.1)