Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • M
Cross-site Scripting (XSS)
com.liferay:com.liferay.asset.api[,10.0.1)Maven21 Aug 2025
  • H
Allocation of Resources Without Limits or Throttling
org.eclipse.jetty.http2:jetty-http2-common[12.0.0-alpha0,12.0.25)[12.1.0.alpha0,12.1.0.beta3)Maven21 Aug 2025
  • H
Allocation of Resources Without Limits or Throttling
org.eclipse.jetty.http2:http2-server[,9.4.58.v20250814)[10.0.0-alpha0,10.0.26)[11.0.0-alpha0,11.0.26)Maven21 Aug 2025
  • H
Allocation of Resources Without Limits or Throttling
org.eclipse.jetty.http2:jetty-http2-server[12.0.0-alpha0,12.0.25)[12.1.0.alpha0,12.1.0.beta3)Maven21 Aug 2025
  • H
Allocation of Resources Without Limits or Throttling
org.eclipse.jetty.http2:http2-common[,9.4.58.v20250814)[10.0.0-alpha0,10.0.26)[11.0.0-alpha0,11.0.26)Maven21 Aug 2025
  • M
Cross-site Scripting (XSS)
com.liferay:com.liferay.layout.type.controller.display.page[,3.0.59)Maven21 Aug 2025
  • M
Improper Neutralization
com.sun.mail:jakarta.mail[,1.6.8)[2.0.0-RC1,2.0.2)Maven20 Aug 2025
  • H
SQL Injection
org.open-metadata:openmetadata-service[,1.4.5-rc1)Maven20 Aug 2025
  • M
Cross-site Scripting (XSS)
org.webjars.npm:mermaid[11.1.0,]Maven20 Aug 2025
  • M
Cross-site Scripting (XSS)
org.webjars.npm:mermaid[10.9.0,]Maven20 Aug 2025
  • M
Cross-site Scripting (XSS)
com.liferay:com.liferay.expando.web[,5.0.60)Maven20 Aug 2025
  • H
Access Control Bypass
org.graalvm.sdk:graal-sdk[,17.0.16)[18.0.0,21.0.8)[22.0.0,24.0.2)Maven19 Aug 2025
  • M
Cross-site Scripting (XSS)
com.liferay:com.liferay.message.boards.web[,5.0.120)Maven19 Aug 2025
  • M
Cross-site Scripting (XSS)
com.liferay:com.liferay.frontend.editor.ckeditor.web[,5.0.111)Maven19 Aug 2025
  • L
Cross-site Scripting (XSS)
com.liferay:com.liferay.layout.taglib[,16.1.33)Maven19 Aug 2025
  • H
SQL Injection
org.open-metadata:openmetadata-service[,1.4.5-rc1)Maven19 Aug 2025
  • H
SQL Injection
org.open-metadata:openmetadata-service[,1.4.5-rc1)Maven19 Aug 2025
  • C
Deserialization of Untrusted Data
org.graalvm.sdk:graal-sdk[,17.0.16)[18.0.0,21.0.8)[22.0.0,24.0.2)Maven19 Aug 2025
  • C
Deserialization of Untrusted Data
org.graalvm.sdk:graal-sdk[,17.0.16)[18.0.0,21.0.8)[22.0.0,24.0.2)Maven19 Aug 2025
  • M
Authorization Bypass Through User-Controlled Key
com.liferay:com.liferay.roles.selector.web[,5.0.31)Maven19 Aug 2025
  • H
Relative Path Traversal
org.springframework:spring-beans[,6.2.10)Maven19 Aug 2025
  • M
SQL Injection
org.open-metadata:openmetadata-service[,1.4.5-rc1)Maven19 Aug 2025
  • L
Allocation of Resources Without Limits or Throttling
org.bouncycastle:bc-fips-debug[2.1.0,2.1.1)Maven18 Aug 2025
  • L
Allocation of Resources Without Limits or Throttling
org.bouncycastle:bc-fips[2.1.0,2.1.1)Maven18 Aug 2025
  • M
Cross-site Scripting (XSS)
com.liferay:com.liferay.frontend.taglib.clay[,15.2.2)Maven14 Aug 2025
  • H
Allocation of Resources Without Limits or Throttling
io.netty:netty-codec-http2[,4.1.124.Final)[4.2.0.Alpha1,4.2.4.Final)Maven14 Aug 2025
  • M
Session Fixation
org.apache.tomcat.embed:tomcat-embed-core[9.0.0.M1,9.0.106)[10.1.0-M1,10.1.42)[11.0.0-M1,11.0.8)Maven14 Aug 2025
  • M
Session Fixation
org.apache.tomcat:tomcat-catalina[9.0.0.M1,9.0.106)[10.1.0-M1,10.1.42)[11.0.0-M1,11.0.8)Maven14 Aug 2025
  • H
Improper Resource Shutdown or Release
org.apache.tomcat.embed:tomcat-embed-core[9.0.0.M1,9.0.108)[10.1.0-M1,10.1.44)[11.0.0-M1,11.0.10)Maven14 Aug 2025
  • H
Improper Resource Shutdown or Release
org.apache.tomcat:tomcat-coyote[9.0.0.M1,9.0.108)[10.1.0-M1,10.1.44)[11.0.0-M1,11.0.10)Maven14 Aug 2025