Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
Command Injection
CVE-2026-102422
Affects
shell-quote
| Versions
>=1.8.4 <1.11.0
M
Server-side Request Forgery (SSRF)
CVE-2026-101910
Affects
ip-address
| Versions
>=10.2.0 <10.5.1
M
Allocation of Resources Without Limits or Throttling
CVE-2026-101911
Affects
ip-address
| Versions
<10.7.1
M
Incorrect Behavior Order
CVE-2026-101913
Affects
ip-address
| Versions
<10.5.1
M
Improper Validation of Specified Type of Input
CVE-2026-101912
Affects
ip-address
| Versions
<10.7.1
H
Prototype Pollution
CVE-2026-101909
Affects
axios
| Versions
>=0.28.0 <0.34.0
>=1.15.1 <1.20.0
M
Prototype Pollution
CVE-2026-101908
Affects
axios
| Versions
>=1.7.0 <1.20.0
H
Allocation of Resources Without Limits or Throttling
CVE-2026-101906
Affects
axios
| Versions
>=1.15.0 <1.20.0
H
Server-side Request Forgery (SSRF)
CVE-2026-101898
Affects
axios
| Versions
>=1.13.0 <1.20.0
M
Improper Input Validation
CVE-2026-101900
Affects
axios
| Versions
>=1.12.0 <1.20.0
H
Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-101907
Affects
axios
| Versions
>=1.17.0 <1.20.0
M
Prototype Pollution
CVE-2026-101902
Affects
axios
| Versions
>=0.27.2 <0.34.0
>=1.0.0 <1.20.0
H
Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-101905
Affects
axios
| Versions
>=1.15.2 <1.20.0
H
Improper Validation of Specified Quantity in Input
CVE-2026-101901
Affects
axios
| Versions
>=1.13.0 <1.20.0
H
Improper Validation of Specified Quantity in Input
CVE-2026-101901
Affects
axios
| Versions
>=1.13.0 <1.20.0
H
Regular Expression Denial of Service (ReDoS)
CVE-2026-101903
Affects
axios
| Versions
>=1.16.1 <1.20.0
M
Prototype Pollution
CVE-2026-101904
Affects
axios
| Versions
>=1.0.0 <1.20.0
H
Uncontrolled Recursion
CVE-2026-102276
Affects
brace-expansion
| Versions
<1.1.19
>=2.0.0 <2.1.5
>=3.0.0 <3.0.7
>=4.0.0 <5.0.10
M
Regular Expression Denial of Service (ReDoS)
CVE-2026-102277
Affects
brace-expansion
| Versions
<1.1.21
>=2.0.0 <2.1.7
>=3.0.0 <3.0.9
>=4.0.0 <5.0.12
H
Uncontrolled Recursion
CVE-2026-102278
Affects
brace-expansion
| Versions
<1.1.20
>=2.0.0 <2.1.6
>=3.0.0 <3.0.8
>=4.0.0 <5.0.11
C
Malicious Package
Affects
llm-nebula
| Versions
=1.0.0
C
Malicious Package
Affects
nebula-llm
| Versions
=1.0.0
C
Malicious Package
Affects
fabric-render-bridge
| Versions
=1.0.0
C
Malicious Package
Affects
simple-date-formatter-new-12
| Versions
=1.0.0
C
Malicious Package
Affects
chalk-figlet
| Versions
=1.2.0
C
Malicious Package
Affects
fabric-asset-pipeline
| Versions
=1.0.0
=1.0.1
C
Malicious Package
Affects
figlet-chalk-render
| Versions
=1.2.1
C
Malicious Package
Affects
nebulaai-sdk
| Versions
=1.0.0
C
Malicious Package
Affects
nebulajs-api
| Versions
*
C
Malicious Package
Affects
img-to-native
| Versions
*