Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Heap-based Buffer Overflow
Affects
org.webjars.npm:sharp
| Versions
[,0.35.4)
H
Directory Traversal
CVE-2026-19693
Affects
org.webjars.npm:extract-zip
| Versions
[0,]
H
Missing Release of Memory after Effective Lifetime
CVE-2026-87776
Affects
org.webjars.npm:compression
| Versions
[,1.8.2)
H
Out-of-bounds Write
CVE-2026-90559
Affects
org.xerial.snappy:snappy-java
| Versions
[0,]
H
Improper Validation of Specified Quantity in Input
CVE-2026-87962
Affects
com.tdunning:t-digest
| Versions
[3.1,]
M
Uncontrolled Recursion
CVE-2026-90472
Affects
org.msgpack:msgpack-core
| Versions
[0,]
M
Integer Overflow or Wraparound
CVE-2026-90473
Affects
org.msgpack:msgpack-core
| Versions
[0,]
M
Allocation of Resources Without Limits or Throttling
CVE-2026-90584
Affects
org.java-websocket:java-websocket
| Versions
[0,]
H
Allocation of Resources Without Limits or Throttling
CVE-2026-68497
Affects
tools.jackson.core:jackson-databind
| Versions
[3.0.0-rc1,3.1.6)
[3.2.0-rc1,3.2.2)
H
Allocation of Resources Without Limits or Throttling
CVE-2026-68497
Affects
com.fasterxml.jackson.core:jackson-databind
| Versions
[2.14.0-rc1,2.18.10)
[2.19.0-rc1,2.21.6)
[2.22.0-rc1,2.22.2)
M
HTTP Request Smuggling
CVE-2026-89044
Affects
io.netty:netty-codec-http
| Versions
[4.2.0.Final, 4.2.18.Final)
[,4.1.138.Final)
H
Out-of-bounds Read
CVE-2026-90560
Affects
com.github.luben:zstd-jni
| Versions
[,1.5.7-14)
M
Infinite loop
CVE-2026-89045
Affects
com.github.luben:zstd-jni
| Versions
[,1.5.7-14)
M
Out-of-bounds Read
CVE-2026-89046
Affects
com.github.luben:zstd-jni
| Versions
[,1.5.7-14)
M
XML External Entity (XXE) Injection
CVE-2026-18061
Affects
software.amazon.jdbc:aws-advanced-jdbc-wrapper
| Versions
[3.3.0,4.3.0)
M
Cross-site Scripting (XSS)
CVE-2025-62198
Affects
org.apache.atlas:atlas-dashboardv2
| Versions
[,2.5.0)
C
Remote Code Execution
CVE-2026-46581
Affects
org.glassfish:jakarta.faces
| Versions
[,4.0.22)
[4.0.23,4.1.13)
H
Improper Certificate Validation
CVE-2026-46968
Affects
org.graalvm.sdk:graal-sdk
| Versions
[,17.0.20)
[21.0.0,21.0.12)
H
Server-side Request Forgery (SSRF)
CVE-2026-73334
Affects
org.apache.parquet:parquet-hadoop
| Versions
[1.12,1.18.1)
M
Relative Path Traversal
CVE-2026-84939
Affects
org.freemarker:freemarker-gae
| Versions
[2.2.0,2.3.35)
M
Relative Path Traversal
CVE-2026-84939
Affects
org.freemarker:freemarker
| Versions
[2.2.0,2.3.35)
M
Cross-site Scripting (XSS)
CVE-2026-32773
Affects
org.apache.spark:spark-core_2.12
| Versions
[,3.5.8)
C
Incomplete List of Disallowed Inputs
CVE-2026-84218
Affects
org.jolokia:jolokia-service-jsr160
| Versions
[,2.6.2)
C
Improper Handling of Alternate Encoding
CVE-2026-19611
Affects
org.wildfly.security:wildfly-elytron-password-impl
| Versions
[0,]
H
Use After Free
CVE-2026-87877
Affects
com.github.luben:zstd-jni
| Versions
[1.3.8-4,1.5.7-14)
H
Use After Free
CVE-2026-87825
Affects
com.github.luben:zstd-jni
| Versions
[1.3.8-4,1.5.7-14)
H
Integer Overflow or Wraparound
CVE-2026-87823
Affects
com.github.luben:zstd-jni
| Versions
[,1.5.7-14)
H
Out-of-bounds Read
CVE-2026-87824
Affects
com.github.luben:zstd-jni
| Versions
[,1.5.7-14)
H
Inefficient Algorithmic Complexity
CVE-2026-87822
Affects
com.tdunning:t-digest
| Versions
[3.1,]
H
Relative Path Traversal
CVE-2026-78254
Affects
org.apache.ant:ant
| Versions
[,1.10.18)