Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Improper Certificate ValidationCVE-2026-71885
Affects org.bouncycastle:bcmls-debug-jdk18on | Versions [,1.86)
Has fix
MavenPublished 4 Oct 2026
  • C
Improper Certificate ValidationCVE-2026-71885
Affects org.bouncycastle:bcmls-jdk18on | Versions [,1.86)
Has fix
MavenPublished 4 Oct 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-68495
Affects tools.jackson.dataformat:jackson-dataformat-cbor | Versions [,3.1.6)[3.2.0,3.2.2)
Has fix
MavenPublished 4 Oct 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-68495
Affects com.fasterxml.jackson.dataformat:jackson-dataformat-cbor | Versions [2.16.0,2.18.10)[2.19.0-rc2,2.21.6)[2.22.0,2.22.2)
Has fix
MavenPublished 4 Oct 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-68496
Affects tools.jackson.dataformat:jackson-dataformat-smile | Versions [,3.1.6)[3.2.0,3.2.2)
Has fix
MavenPublished 4 Oct 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-68496
Affects com.fasterxml.jackson.dataformat:jackson-dataformat-smile | Versions [2.16.0,2.18.10)[2.19.0-rc2,2.21.6)[2.22.0,2.22.2)
Has fix
MavenPublished 4 Oct 2026
  • M
Cross-site Scripting (XSS)
Affects org.webjars.npm:dompurify | Versions [3.4.13,3.4.16)
Has fix
MavenPublished 1 Oct 2026
  • M
Uncaught ExceptionCVE-2026-103387
Affects org.webjars.npm:uri-js | Versions [0,]
Has fix
MavenPublished 1 Oct 2026
  • M
Improper Encoding or Escaping of OutputCVE-2026-93751
Affects org.webjars.npm:uri-js | Versions [0,]
Has fix
MavenPublished 1 Oct 2026
  • M
Improper Isolation or CompartmentalizationCVE-2026-101899
Affects org.webjars.npm:axios | Versions [1.15.0,1.20.0)
Has fix
MavenPublished 1 Oct 2026
  • H
Directory TraversalCVE-2026-103088
Affects com.github.jknack:handlebars-springmvc | Versions [4.5.3,4.5.5)
Has fix
MavenPublished 30 Sept 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-68763
Affects org.apache.tomcat:tomcat | Versions [9.0.39, 9.0.121)[10.1.0-M1, 10.1.59)[11.0.0-M1, 11.0.25)
Has fix
MavenPublished 30 Sept 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-68763
Affects org.apache.tomcat.embed:tomcat-embed-core | Versions [9.0.39, 9.0.121)[10.1.0-M1, 10.1.59)[11.0.0-M1, 11.0.25)
Has fix
MavenPublished 30 Sept 2026
  • H
Authentication Bypass by Primary WeaknessCVE-2026-68569
Affects org.apache.tomcat.embed:tomcat-embed-core | Versions [9.0.0.M1, 9.0.121)[10.1.0-M1, 10.1.59)[11.0.0-M1, 11.0.25)
Has fix
MavenPublished 30 Sept 2026
  • H
Authentication Bypass by Primary WeaknessCVE-2026-68569
Affects org.apache.tomcat:tomcat | Versions [9.0.0.M1, 9.0.121)[10.1.0-M1, 10.1.59)[11.0.0-M1, 11.0.25)
Has fix
MavenPublished 30 Sept 2026
  • H
Off-by-one ErrorCVE-2026-65927
Affects org.apache.tomcat:tomcat | Versions [9.0.0.M1,9.0.121)[11.0.0-M1,10.1.59)[11.0.0-M1,11.0.25)
Has fix
MavenPublished 30 Sept 2026
  • H
Off-by-one ErrorCVE-2026-65927
Affects org.apache.tomcat.embed:tomcat-embed-core | Versions [9.0.0.M1,9.0.121)[11.0.0-M1,10.1.59)[11.0.0-M1,11.0.25)
Has fix
MavenPublished 30 Sept 2026
  • M
Insufficient Session ExpirationCVE-2026-73180
Affects org.apache.tomcat.embed:tomcat-embed-websocket | Versions [9.0.0.M1, 9.0.121)[10.1.0-M1, 10.1.59)[11.0.0-M1, 11.0.25)
Has fix
MavenPublished 30 Sept 2026
  • M
Insufficient Session ExpirationCVE-2026-73180
Affects org.apache.tomcat:tomcat | Versions [9.0.0.M1, 9.0.121)[10.1.0-M1, 10.1.59)[11.0.0-M1, 11.0.25)
Has fix
MavenPublished 30 Sept 2026
  • M
Insufficient Session ExpirationCVE-2026-73180
Affects org.apache.tomcat.embed:tomcat-embed-core | Versions [9.0.0.M1, 9.0.121)[10.1.0-M1, 10.1.59)[11.0.0-M1, 11.0.25)
Has fix
MavenPublished 30 Sept 2026
  • C
Incorrect AuthorizationCVE-2026-68525
Affects org.apache.tomcat:tomcat | Versions [9.0.0.M1,9.0.121)[10.1.0-M1,10.1.59)[11.0.0-M1,11.0.25)
Has fix
MavenPublished 30 Sept 2026
  • C
Replay AttackCVE-2026-65905
Affects org.apache.tomcat:tomcat | Versions [9.0.0.M1,9.0.121)[11.0.0-M1,10.1.59)[11.0.0-M1,11.0.25)
Has fix
MavenPublished 30 Sept 2026
  • C
Incorrect AuthorizationCVE-2026-68525
Affects org.apache.tomcat.embed:tomcat-embed-core | Versions [9.0.0.M1,9.0.121)[10.1.0-M1,10.1.58)[11.0.0-M1,11.0.25)
Has fix
MavenPublished 30 Sept 2026
  • C
Replay AttackCVE-2026-65905
Affects org.apache.tomcat.embed:tomcat-embed-core | Versions [9.0.0.M1,9.0.121)[11.0.0-M1,10.1.59)[11.0.0-M1,11.0.25)
Has fix
MavenPublished 30 Sept 2026
  • M
Regular Expression Denial of Service (ReDoS)CVE-2026-102277
Affects org.webjars.npm:brace-expansion | Versions [,5.0.12)
Has fix
MavenPublished 29 Sept 2026
  • H
Uncontrolled RecursionCVE-2026-102276
Affects org.webjars.npm:brace-expansion | Versions [,5.0.12)
Has fix
MavenPublished 29 Sept 2026
  • H
Uncontrolled RecursionCVE-2026-102278
Affects org.webjars.npm:brace-expansion | Versions [,5.0.12)
Has fix
MavenPublished 29 Sept 2026
  • H
Improper Validation of Specified Quantity in InputCVE-2026-101901
Affects org.webjars.npm:axios | Versions [1.13.0,1.20.0)
Has fix
MavenPublished 29 Sept 2026
  • H
Regular Expression Denial of Service (ReDoS)CVE-2026-101903
Affects org.webjars.npm:axios | Versions [1.16.1,1.20.0)
Has fix
MavenPublished 29 Sept 2026
  • M
Prototype PollutionCVE-2026-101904
Affects org.webjars.npm:axios | Versions [1.0.0,1.20.0)
Has fix
MavenPublished 29 Sept 2026