Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Prototype PollutionCVE-2026-54312
Affects n8n-nodes-base | Versions <2.24.0
Has fix
npmPublished 1 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-47684
Affects @sync-in/server | Versions <2.3.0
Has fix
npmPublished 1 Jul 2026
  • C
Malicious Package
Affects @cap-js/openapi | Versions =1.4.1
Has fix
npmPublished 1 Jul 2026
  • H
Missing Authentication for Critical Function
Affects @agenticmail/mcp | Versions <0.9.27
Has fix
npmPublished 1 Jul 2026
  • C
Resources Downloaded over Insecure Protocol
Affects esbuild | Versions >=0.17.0 <0.28.1
Has fix
npmPublished 1 Jul 2026
  • M
Exposure of Data Element to Wrong SessionCVE-2026-54311
Affects n8n-nodes-base | Versions <2.25.2>=2.26.0 <2.26.5
Has fix
npmPublished 1 Jul 2026
  • L
Directory Traversal
Affects esbuild | Versions >=0.27.3 <0.28.1
Has fix
npmPublished 1 Jul 2026
  • H
Arbitrary Code InjectionCVE-2026-49143
Affects browserstack-runner | Versions >=0.0.0
Has fix
npmPublished 1 Jul 2026
  • H
Directory TraversalCVE-2026-49144
Affects browserstack-runner | Versions >=0.0.0
Has fix
npmPublished 1 Jul 2026
  • H
Cross-site Scripting (XSS)CVE-2026-54301
Affects n8n | Versions <1.123.55>=2.0.0-rc.0 <2.25.7>=2.26.0 <2.26.2
Has fix
npmPublished 1 Jul 2026
  • M
User ImpersonationCVE-2026-54308
Affects @n8n/n8n-nodes-langchain | Versions >=2.7.0 <2.25.2>=2.26.0 <2.26.1
Has fix
npmPublished 1 Jul 2026
  • C
Incorrect Behavior OrderCVE-2026-6556
Affects @fastify/express | Versions <4.0.7
Has fix
npmPublished 1 Jul 2026
  • H
Uncontrolled Search Path ElementCVE-2026-54672
Affects app-builder-bin | Versions *
No fix available
npmPublished 1 Jul 2026
  • H
Uncontrolled Search Path ElementCVE-2026-54672
Affects app-builder-lib | Versions <26.15.0
Has fix
npmPublished 1 Jul 2026
  • H
Insertion of Sensitive Information Into Sent DataCVE-2026-54673
Affects builder-util-runtime | Versions <9.7.0
Has fix
npmPublished 1 Jul 2026
  • M
Directory TraversalCVE-2026-53766
Affects chrome-devtools-mcp | Versions >=0.24.0 <1.1.0
Has fix
npmPublished 1 Jul 2026
  • L
Cross-site Scripting (XSS)CVE-2026-54326
Affects @mariozechner/pi-coding-agent | Versions *
No fix available
npmPublished 30 Jun 2026
  • L
Cross-site Scripting (XSS)CVE-2026-54326
Affects @earendil-works/pi-coding-agent | Versions <0.78.1
Has fix
npmPublished 30 Jun 2026
  • L
Time-of-check Time-of-use (TOCTOU) Race ConditionCVE-2026-54327
Affects @mariozechner/pi-coding-agent | Versions *
No fix available
npmPublished 30 Jun 2026
  • L
Time-of-check Time-of-use (TOCTOU) Race ConditionCVE-2026-54327
Affects @earendil-works/pi-coding-agent | Versions <0.78.1
Has fix
npmPublished 30 Jun 2026
  • M
SQL InjectionCVE-2026-47255
Affects @agenticmail/api | Versions <0.9.32
Has fix
npmPublished 30 Jun 2026
  • M
SQL InjectionCVE-2026-47255
Affects @agenticmail/core | Versions <0.9.10
Has fix
npmPublished 30 Jun 2026
  • C
Incorrect AuthorizationCVE-2026-43945
Affects @frangoteam/fuxa | Versions >=1.2.11 <1.3.1
Has fix
npmPublished 30 Jun 2026
  • C
Prototype PollutionCVE-2026-46681
Affects @nevware21/ts-utils | Versions <0.14.0
Has fix
npmPublished 30 Jun 2026
  • L
Cross-site Scripting (XSS)
Affects @sveltia/cms | Versions <0.160.1
Has fix
npmPublished 30 Jun 2026
  • H
Server-side Request Forgery (SSRF)
Affects @karakeep/sdk | Versions <0.32.0
Has fix
npmPublished 30 Jun 2026
  • C
Arbitrary Code InjectionCVE-2025-63706
Affects @jswork/next-npm-version | Versions *
No fix available
npmPublished 30 Jun 2026
  • M
Improper AuthorizationCVE-2026-46700
Affects @actual-app/sync-server | Versions <26.6.0
Has fix
npmPublished 30 Jun 2026
  • H
Insufficient Session ExpirationCVE-2026-49229
Affects @actual-app/sync-server | Versions <26.6.0
Has fix
npmPublished 30 Jun 2026
  • M
Arbitrary Argument Injection
Affects @cyclonedx/cdxgen | Versions <12.4.3
Has fix
npmPublished 30 Jun 2026