Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Missing AuthorizationCVE-2026-41266
Affects flowise | Versions <3.1.0
Has fix
npmPublished 22 Apr 2026
  • C
Embedded Malicious Code
Affects kube-health-tools | Versions *
No fix available
npmPublished 22 Apr 2026
  • H
Arbitrary File UploadCVE-2026-41269
Affects flowise-components | Versions <3.1.0
Has fix
npmPublished 22 Apr 2026
  • H
Arbitrary File UploadCVE-2026-41269
Affects flowise | Versions <3.1.0
Has fix
npmPublished 22 Apr 2026
  • H
Missing Authentication for Critical FunctionCVE-2026-41273
Affects flowise | Versions <3.1.0
Has fix
npmPublished 22 Apr 2026
  • M
Use of Hard-coded Credentials
Affects flowise | Versions <3.1.0
Has fix
npmPublished 22 Apr 2026
  • M
Use of Hard-coded Credentials
Affects flowise | Versions <3.1.0
Has fix
npmPublished 22 Apr 2026
  • M
Cross-site Scripting (XSS)CVE-2026-41067
Affects astro | Versions <6.1.6
Has fix
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects @bitunix/test | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects @usealloy/component-library | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects claudcode-cli | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects aven_types | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects trackora-chain | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects trackora-node | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects js-logger-pack | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects @usealloy/typegen | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects ts-utils-dev | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects claudcode-mcp | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects gleb-js | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects crypto-keccak-js | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects chai-as-encrypted | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Embedded Malicious Code
Affects @openwebconcept/theme-owc | Versions >=1.0.1 <=1.0.3
Has fix
npmPublished 22 Apr 2026
  • C
Embedded Malicious Code
Affects @openwebconcept/design-tokens | Versions >=1.0.1 <=1.0.3
Has fix
npmPublished 22 Apr 2026
  • C
Embedded Malicious Code
Affects @automagik/genie | Versions >=4.260421.33 <=4.260421.39
Has fix
npmPublished 22 Apr 2026
  • C
Embedded Malicious Code
Affects pgserve | Versions >=1.1.11 <=1.1.14
Has fix
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects @usealloy/api-contract | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Improperly Controlled Modification of Dynamically-Determined Object AttributesCVE-2026-41267
Affects flowise | Versions <3.1.0
Has fix
npmPublished 21 Apr 2026
  • C
Malicious Package
Affects com.tencent.puerts.agent | Versions *
No fix available
npmPublished 21 Apr 2026
  • C
Command InjectionCVE-2026-41500
Affects electerm | Versions <3.3.8
Has fix
npmPublished 21 Apr 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-40346
Affects @nocobase/plugin-workflow-request | Versions <2.0.37
Has fix
npmPublished 21 Apr 2026