Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
Eval Injection
CVE-2026-69253
Affects
flowise
| Versions
<3.1.3
C
Eval Injection
CVE-2026-69253
Affects
flowise-components
| Versions
<3.1.3
C
Arbitrary Code Injection
CVE-2026-69256
Affects
flowise-components
| Versions
<3.1.3
C
Arbitrary Code Injection
CVE-2026-69256
Affects
flowise
| Versions
<3.1.3
C
Arbitrary Code Injection
CVE-2026-70477
Affects
flowise
| Versions
<3.1.3
C
Arbitrary Code Injection
CVE-2026-70477
Affects
flowise-components
| Versions
<3.1.3
C
Eval Injection
CVE-2026-69264
Affects
flowise
| Versions
<3.1.3
C
Eval Injection
CVE-2026-69264
Affects
flowise-components
| Versions
<3.1.3
H
External Control of File Name or Path
Affects
flowise-components
| Versions
<3.1.3
H
External Control of File Name or Path
Affects
flowise
| Versions
<3.1.3
C
Incomplete List of Disallowed Inputs
CVE-2026-70470
Affects
flowise
| Versions
<3.1.3
C
Incomplete List of Disallowed Inputs
CVE-2026-70470
Affects
flowise-components
| Versions
<3.1.3
C
Incomplete List of Disallowed Inputs
CVE-2026-70470
Affects
flowise
| Versions
<3.1.3
C
Incomplete List of Disallowed Inputs
CVE-2026-70470
Affects
flowise-components
| Versions
<3.1.3
M
Missing Authorization
Affects
@astrojs/vercel
| Versions
>=10.0.3 <11.0.3
M
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2026-71851
Affects
crypto-js
| Versions
>=3.1.2-4 <4.0.0
M
Information Exposure
CVE-2026-72744
Affects
@nuxt/nitro-server
| Versions
>=3.21.7 <3.21.10
>=4.4.7 <4.5.1
M
Information Exposure
CVE-2026-72744
Affects
nuxt
| Versions
>=3.21.7 <3.21.10
>=4.4.7 <4.5.1
H
HTTP Request Smuggling
Affects
ngx-extended-pdf-viewer
| Versions
>=27.0.0-rc.4 <29.0.0-rc.3
M
Inefficient Algorithmic Complexity
CVE-2026-71848
Affects
hono
| Versions
>=4.12.0 <4.12.34
M
Cross-site Scripting (XSS)
Affects
dompurify
| Versions
<3.4.13
H
Inefficient Algorithmic Complexity
Affects
js-yaml
| Versions
>=3.0.0 <3.15.1
>=4.0.0 <4.3.1
H
Symlink Attack
CVE-2026-71476
Affects
nx
| Versions
>=20.8.0 <22.7.7
>=23.0.0 <23.0.2
>=23.1.0-beta.0 <23.1.0-beta.5
M
Regular Expression Denial of Service (ReDoS)
CVE-2026-66062
Affects
@sveltejs/kit
| Versions
<2.70.2
H
Authentication Bypass by Assumed-Immutable Data
CVE-2026-5423
Affects
@neo4j/graphql
| Versions
>=5.0.0 <5.12.14
>=6.0.0 <7.5.6
H
Directory Traversal
CVE-2026-18427
Affects
@fastify/static
| Versions
<10.1.3
H
Cross-site Scripting (XSS)
CVE-2026-16633
Affects
pdfjs-dist
| Versions
>=5.6.205 <6.2.108
M
HTTP Request Smuggling
CVE-2026-71849
Affects
hono
| Versions
>=4.7.0 <4.12.34
M
Exposure of Data Element to Wrong Session
CVE-2026-71850
Affects
hono
| Versions
>=3.8.0 <4.12.34
M
Prototype Pollution
CVE-2026-71437
Affects
mermaid
| Versions
>=11.5.0 <11.16.1