Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Origin Validation Error
CVE-2026-112085
Affects
webpack-dev-server
| Versions
<5.2.7
>=6.0.0 <6.1.0
M
Information Exposure
CVE-2026-114348
Affects
webpack-dev-server
| Versions
>=5.1.0 <5.2.7
>=6.0.0 <6.1.0
C
Malicious Package
Affects
@conduitops/logview-archive
| Versions
=1.0.1
C
Malicious Package
Affects
formatting-subtitles
| Versions
=1.0.2
C
Malicious Package
Affects
simplewave
| Versions
=0.0.2
C
Malicious Package
Affects
log-rotate-testmetest
| Versions
=1.0.1
C
Malicious Package
Affects
net-codec-testmetest
| Versions
=1.0.1
C
Malicious Package
Affects
log-sink-testmetest
| Versions
=1.0.1
C
Malicious Package
Affects
event-emitter-testmetest
| Versions
=5.0.0
=4.1.0
=1.0.7
=1.0.6
C
Malicious Package
Affects
test-brotli2-testmetest
| Versions
=1.0.0
C
Malicious Package
Affects
test-brotli-testmetest
| Versions
=1.0.0
C
Malicious Package
Affects
pixel-map-testmetest
| Versions
=0.0.2
=0.0.1
C
Malicious Package
Affects
data-pipeline-testmetest
| Versions
=2.0.1
C
Malicious Package
Affects
@sudobility/indexer_client
| Versions
=0.0.146
C
Malicious Package
Affects
@sudobility/shaperouter_client
| Versions
=0.0.14
C
Malicious Package
Affects
@sudobility/wildduck_client
| Versions
=2.3.102
C
Malicious Package
Affects
@sudobility/testomniac_client
| Versions
=0.0.131
C
Malicious Package
Affects
@worrisome/aaaa
| Versions
*
C
Malicious Package
Affects
peptide-modify
| Versions
*
M
Cross-site Scripting (XSS)
CVE-2026-113350
Affects
ra-core
| Versions
<5.15.5
M
Insufficiently Protected Credentials
CVE-2026-113652
Affects
uploadfs
| Versions
>=1.25.0 <1.28.0
L
Directory Traversal
CVE-2026-113651
Affects
uploadfs
| Versions
<1.28.0
H
Incorrect Authorization
CVE-2026-111771
Affects
@modelcontextprotocol/sdk
| Versions
>=1.6.0 <1.32.0
H
Incorrect Authorization
CVE-2026-111771
Affects
@modelcontextprotocol/server
| Versions
>=2.0.0 <2.3.0
H
Incorrect Authorization
CVE-2026-111771
Affects
@modelcontextprotocol/express
| Versions
>=2.0.0 <2.0.2
H
Incorrect Authorization
CVE-2026-111771
Affects
@modelcontextprotocol/server-legacy
| Versions
>=2.0.0 <2.3.1
H
Open Redirect
CVE-2026-111769
Affects
@modelcontextprotocol/client
| Versions
>=2.0.0 <2.3.0
H
Open Redirect
CVE-2026-111769
Affects
@modelcontextprotocol/sdk
| Versions
<1.32.0
H
Missing Authorization
CVE-2026-111767
Affects
@modelcontextprotocol/sdk
| Versions
>=1.24.0 <1.32.0
M
Exposure of Private Personal Information to an Unauthorized Actor
CVE-2026-111753
Affects
@angular/common
| Versions
<20.3.34
>=21.0.0 <21.0.3