Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-118662
Affects
vite
| Versions
>=6.4.4 <6.4.5
H
Prototype Pollution
CVE-2026-118249
Affects
highcharts
| Versions
>=13.0.0 <13.1.0
H
Regular Expression Denial of Service (ReDoS)
CVE-2026-118664
Affects
decode-uri-component
| Versions
<0.5.1
H
Command Injection
CVE-2026-116576
Affects
systeminformation
| Versions
<5.33.16
M
Insecure Default Initialization of Resource
CVE-2026-61793
Affects
nuxt-og-image
| Versions
>=6.0.2 <6.7.0
C
Malicious Package
Affects
@atlisp/mcp
| Versions
=1.12.14
C
Malicious Package
Affects
@testsecuiitytestme/cache-helper
| Versions
=1.0.1
=1.0.2
=1.0.3
M
Information Exposure
CVE-2026-118272
Affects
@a2ui/web_core
| Versions
<0.12.0
M
Allocation of Resources Without Limits or Throttling
CVE-2026-118276
Affects
@a2ui/web_core
| Versions
<0.12.0
M
Allocation of Resources Without Limits or Throttling
CVE-2026-118273
Affects
@a2ui/web_core
| Versions
<0.12.0
M
Uncontrolled Recursion
CVE-2026-118275
Affects
@a2ui/web_core
| Versions
<0.12.0
M
Allocation of Resources Without Limits or Throttling
CVE-2026-118274
Affects
@a2ui/web_core
| Versions
<0.12.0
M
Server-side Request Forgery (SSRF)
CVE-2026-118172
Affects
@strapi/core
| Versions
*
M
Server-side Request Forgery (SSRF)
CVE-2026-118172
Affects
@strapi/admin
| Versions
*
M
Missing Authorization
CVE-2026-118171
Affects
@strapi/content-manager
| Versions
*
H
Improper Authorization
CVE-2026-118170
Affects
@strapi/review-workflows
| Versions
*
H
Insertion of Sensitive Information Into Sent Data
CVE-2026-116689
Affects
follow-redirects
| Versions
>=1.16.0 <1.16.2
M
Allocation of Resources Without Limits or Throttling
CVE-2026-118271
Affects
@a2ui/web_core
| Versions
<0.12.0
C
Malicious Package
Affects
@webapp-shared/login-vmok
| Versions
=99.0.1
=3.0.0
=2.0.1
=1.1.0
=1.0.1
=1.0.0
C
Malicious Package
Affects
csvflow-schema
| Versions
=1.0.0
C
Malicious Package
Affects
glyphmatrix-fixture
| Versions
=1.0.1
=1.0.0
C
Malicious Package
Affects
ccsseecc-form-validator
| Versions
*
C
Malicious Package
Affects
ccsec-crypto-toolkit
| Versions
*
C
Malicious Package
Affects
csec-form-validatorr
| Versions
*
C
Malicious Package
Affects
csec-crypto-toolkit
| Versions
*
C
Malicious Package
Affects
ccsec-form-validator
| Versions
*
C
Malicious Package
Affects
ccsseecc-crypto-toolkit
| Versions
*
C
Malicious Package
Affects
csec-form-validator
| Versions
*
C
Malicious Package
Affects
agentenact
| Versions
=0.2.0
L
Cross-site Scripting (XSS)
CVE-2026-116687
Affects
ckeditor5
| Versions
>=29.0.0 <47.7.4
>=48.0.0 <48.5.1