Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
Malicious Package
Affects
@langgraphjs/toolkit
| Versions
*
M
Directory Traversal
CVE-2026-8765
Affects
@kilocode/sdk
| Versions
<7.0.47
M
Files or Directories Accessible to External Parties
CVE-2026-8766
Affects
@kilocode/cli
| Versions
<7.0.48
H
Unsafe Dependency Resolution
CVE-2026-55697
Affects
@pnpm/config
| Versions
<1004.11.3
H
Improper Encoding or Escaping of Output
CVE-2026-49091
Affects
kibana
| Versions
>=7.0.0 <7.17.15
>=8.0.0 <8.11.1
M
Insertion of Sensitive Information into Log File
CVE-2026-49088
Affects
kibana
| Versions
>=8.0.0 <8.18.9
>=8.19.0 <8.19.6
>=9.0.0 <9.0.8
>=9.1.0 <9.1.6
H
Allocation of Resources Without Limits or Throttling
CVE-2026-56151
Affects
kibana
| Versions
>=8.0.0 <8.19.17
>=9.0.0 <9.3.6
>=9.4.0 <9.4.3
H
Allocation of Resources Without Limits or Throttling
CVE-2026-33464
Affects
kibana
| Versions
>=8.0.0 <8.19.16
>=9.0.0 <9.3.5
>=9.4.0 <9.4.1
H
Exposed Dangerous Method or Function
CVE-2026-45805
Affects
@penpot/mcp
| Versions
<2.15.0
L
Improper Authorization
CVE-2026-13511
Affects
@voltagent/serverless-hono
| Versions
*
L
Improper Authorization
CVE-2026-13511
Affects
@voltagent/server-hono
| Versions
*
L
Improper Authorization
CVE-2026-13511
Affects
@voltagent/server-elysia
| Versions
*
L
Improper Authorization
CVE-2026-13511
Affects
@voltagent/server-core
| Versions
*
M
Brute Force
CVE-2026-55501
Affects
9router
| Versions
<0.4.80
H
Incorrect Authorization
CVE-2026-55500
Affects
9router
| Versions
<0.4.80
C
Missing Authorization
CVE-2026-59801
Affects
9router
| Versions
<0.5.15
M
Cross-site Scripting (XSS)
CVE-2026-59710
Affects
showdown
| Versions
*
M
Cross-site Scripting (XSS)
CVE-2026-59711
Affects
showdown
| Versions
*
M
Insufficiently Protected Credentials
CVE-2026-55180
Affects
pnpm
| Versions
<10.34.2
>=11.0.0 <11.5.3
C
Malicious Package
Affects
chai-spycore
| Versions
*
C
Malicious Package
Affects
express-firegate
| Versions
*
C
Malicious Package
Affects
express-deflect
| Versions
*
H
Directory Traversal
CVE-2026-53486
Affects
@xhmikosr/decompress
| Versions
<10.2.1
>=11.0.0 <11.1.3
H
Directory Traversal
CVE-2026-53486
Affects
decompress
| Versions
*
C
Malicious Package
Affects
txs-data
| Versions
*
C
Malicious Package
Affects
wime-zle
| Versions
*
C
Malicious Package
Affects
ts-relayer-pub
| Versions
*
C
Malicious Package
Affects
pino-formatter
| Versions
*
C
Malicious Package
Affects
tailwind-fonttype-inter
| Versions
*
C
Malicious Package
Affects
react-check-error
| Versions
*