Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Malicious Package
Affects nitro-bundled-dep | Versions =1.1.0=2.0.1=99.0.1
Has fix
npmPublished 11 Oct 2026
  • C
Malicious Package
Affects @coopeuch/common | Versions =1.999.999
Has fix
npmPublished 11 Oct 2026
  • C
Malicious Package
Affects pay-methods-kmf | Versions =100.100.101=100.100.100=100.100.102
Has fix
npmPublished 11 Oct 2026
  • C
Malicious Package
Affects another-very-long-name | Versions =1.1.0=2.0.1=1.0.1=2.0.0
Has fix
npmPublished 11 Oct 2026
  • C
Malicious Package
Affects ksp-app | Versions =100.100.100
Has fix
npmPublished 11 Oct 2026
  • C
Malicious Package
Affects @s4yhiitestpoc/r2-https | Versions =1.0.0
Has fix
npmPublished 11 Oct 2026
  • C
Malicious Package
Affects @coopeuch/button | Versions =1.999.999
Has fix
npmPublished 11 Oct 2026
  • C
Malicious Package
Affects nested-lib | Versions =1.1.0=1.0.1=1.0.0
Has fix
npmPublished 11 Oct 2026
  • C
Malicious Package
Affects some-very-long-package-name | Versions =2.0.1=3.0.0=1.0.0=2.0.0
Has fix
npmPublished 11 Oct 2026
  • C
Malicious Package
Affects @coopeuch/config | Versions =1.999.999
Has fix
npmPublished 11 Oct 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-105867
Affects @payloadcms/storage-s3 | Versions <3.90.0>=4.0.0-canary.0 <4.0.0-canary.34
Has fix
npmPublished 11 Oct 2026
  • H
Missing AuthorizationCVE-2026-105806
Affects @payloadcms/plugin-mcp | Versions >=3.61.0 <3.88.0
Has fix
npmPublished 11 Oct 2026
  • M
Directory TraversalCVE-2026-106491
Affects @backstage/plugin-proxy-backend | Versions <0.6.17
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106463
Affects @backstage/plugin-catalog-backend-module-gitlab | Versions <0.8.7
Has fix
npmPublished 11 Oct 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2026-106488
Affects @backstage/plugin-auth-backend-module-oidc-provider | Versions <0.4.20
Has fix
npmPublished 11 Oct 2026
  • H
External Control of File Name or PathCVE-2026-106559
Affects @backstage/plugin-scaffolder-backend-module-confluence-to-markdown | Versions <0.3.25
Has fix
npmPublished 11 Oct 2026
  • M
Missing AuthorizationCVE-2026-106563
Affects @backstage/plugin-kubernetes-backend | Versions <0.21.8
Has fix
npmPublished 11 Oct 2026
  • H
Directory TraversalCVE-2026-106560
Affects @backstage/plugin-scaffolder-backend-module-confluence-to-markdown | Versions <0.3.25
Has fix
npmPublished 11 Oct 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2026-106457
Affects @backstage/plugin-auth-backend-module-cloudflare-access-provider | Versions >=0.1.0 <0.5.0
Has fix
npmPublished 11 Oct 2026
  • H
Incorrect AuthorizationCVE-2026-106458
Affects @backstage/plugin-catalog-backend-module-bitbucket-server | Versions >=0.4.0 <0.5.15
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106562
Affects @backstage/plugin-search-backend | Versions <2.1.6
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106562
Affects @backstage/plugin-search-backend-module-elasticsearch | Versions <1.8.7
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106561
Affects @backstage/plugin-kubernetes-backend | Versions <0.21.9
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106456
Affects @backstage/plugin-proxy-backend | Versions >=0.5.0 <0.6.18
Has fix
npmPublished 11 Oct 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2026-106460
Affects @backstage/plugin-auth-node | Versions >=0.3.0 <0.6.15>=0.7.0 <0.7.5
Has fix
npmPublished 11 Oct 2026
  • L
Unintended Proxy or Intermediary ('Confused Deputy')CVE-2026-106487
Affects @backstage/plugin-kubernetes-backend | Versions <0.21.10
Has fix
npmPublished 11 Oct 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-106459
Affects @backstage/plugin-scaffolder-backend-module-sentry | Versions >=0.3.0 <0.3.8
Has fix
npmPublished 11 Oct 2026
  • C
Symlink AttackCVE-2026-106486
Affects @backstage/plugin-scaffolder-backend-module-bitbucket-cloud | Versions <0.3.10
Has fix
npmPublished 11 Oct 2026
  • C
Symlink AttackCVE-2026-106486
Affects @backstage/plugin-scaffolder-backend-module-bitbucket-server | Versions <0.2.25
Has fix
npmPublished 11 Oct 2026
  • H
Relative Path TraversalCVE-2026-106490
Affects @backstage/plugin-techdocs-backend | Versions <2.2.4
Has fix
npmPublished 11 Oct 2026