Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
Missing Authentication for Critical Function
CVE-2026-28472
Affects
openclaw
| Versions
<2026.2.2
H
Directory Traversal
CVE-2026-28447
Affects
openclaw
| Versions
>=2026.1.29-beta.1 <2026.2.1
H
Improper Authentication
CVE-2026-28446
Affects
@openclaw/voice-call
| Versions
<2026.2.2
H
Improper Following of Specification by Caller
CVE-2025-69287
Affects
@bsv/sdk
| Versions
<2.0.0
H
XML Entity Expansion
CVE-2026-26278
Affects
fast-xml-parser
| Versions
>=4.1.3 <4.5.4
>=5.0.0 <5.3.6
H
Directory Traversal
CVE-2026-26960
Affects
tar
| Versions
<7.5.8
C
Malicious Package
Affects
bigmathutils
| Versions
*
C
Malicious Package
Affects
bignumberx
| Versions
*
C
Malicious Package
Affects
graphkitx
| Versions
*
C
Malicious Package
Affects
terminalcolor256
| Versions
*
C
Malicious Package
Affects
graphnetworkx
| Versions
*
C
Malicious Package
Affects
netstruct
| Versions
*
C
Malicious Package
Affects
webpack-vite
| Versions
*
C
Malicious Package
Affects
ambar-src
| Versions
*
H
Command Injection
CVE-2026-2544
Affects
lu2
| Versions
>=0.0.0
H
Arbitrary Code Injection
CVE-2026-0969
Affects
next-mdx-remote
| Versions
>=4.3.0 <6.0.0
M
Improper Removal of Sensitive Information Before Storage or Transfer
Affects
renovate
| Versions
>=42.68.1 <42.96.3
>=43.0.0 <43.4.4
H
Missing Origin Validation in WebSockets
CVE-2025-56647
Affects
@farmfe/core
| Versions
<1.7.6
M
Cross-site Scripting (XSS)
CVE-2026-26226
Affects
beautiful-mermaid
| Versions
<0.1.3
M
Cross-site Scripting (XSS)
Affects
agents
| Versions
<0.3.10
C
Malicious Package
Affects
sinon-web3-chain
| Versions
*
C
Malicious Package
Affects
json-mapping-src
| Versions
*
C
Malicious Package
Affects
envoy1
| Versions
*
M
Improper Authentication
Affects
@capgo/capacitor-native-biometric
| Versions
<8.3.6
C
Malicious Package
Affects
wropz-6module
| Versions
*
C
Malicious Package
Affects
metadata-stripper
| Versions
*
C
Malicious Package
Affects
hxz-protection
| Versions
*
C
Malicious Package
Affects
ecosystem_ui
| Versions
*
C
Malicious Package
Affects
wropz-module
| Versions
*
C
Malicious Package
Affects
despicable-me
| Versions
*