Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Embedded Malicious Code
Affects @automagik/genie | Versions >=4.260421.33 <=4.260421.39
Has fix
npmPublished 22 Apr 2026
  • C
Embedded Malicious Code
Affects pgserve | Versions >=1.1.11 <=1.1.14
Has fix
npmPublished 22 Apr 2026
  • C
Malicious Package
Affects @usealloy/api-contract | Versions *
No fix available
npmPublished 22 Apr 2026
  • C
Improperly Controlled Modification of Dynamically-Determined Object AttributesCVE-2026-41267
Affects flowise | Versions <3.1.0
Has fix
npmPublished 21 Apr 2026
  • C
Malicious Package
Affects com.tencent.puerts.agent | Versions *
No fix available
npmPublished 21 Apr 2026
  • C
Command InjectionCVE-2026-41500
Affects electerm | Versions <3.3.8
Has fix
npmPublished 21 Apr 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-40346
Affects @nocobase/plugin-workflow-request | Versions <2.0.37
Has fix
npmPublished 21 Apr 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-40346
Affects @nocobase/plugin-ai | Versions <2.0.37
Has fix
npmPublished 21 Apr 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-40346
Affects @nocobase/plugin-action-custom-request | Versions <2.0.37
Has fix
npmPublished 21 Apr 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-40346
Affects @nocobase/utils | Versions <2.0.37
Has fix
npmPublished 21 Apr 2026
  • M
Incorrect AuthorizationCVE-2026-40155
Affects @auth0/nextjs-auth0 | Versions >=4.12.0 <4.18.0
Has fix
npmPublished 21 Apr 2026
  • M
Cleartext Transmission of Sensitive InformationCVE-2026-41275
Affects flowise | Versions <3.1.0
Has fix
npmPublished 21 Apr 2026
  • C
Improper Handling of Missing ValuesCVE-2026-41276
Affects flowise | Versions >=3.0.1 <3.1.0
Has fix
npmPublished 21 Apr 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-41279
Affects flowise | Versions >=3.0.8 <3.1.0
Has fix
npmPublished 21 Apr 2026
  • H
Insertion of Sensitive Information Into Sent DataCVE-2026-41278
Affects flowise | Versions >=3.0.5 <3.1.0
Has fix
npmPublished 21 Apr 2026
  • C
Malicious Package
Affects internal_insights_enabled | Versions *
No fix available
npmPublished 21 Apr 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-41277
Affects flowise | Versions >=1.7.1 <3.1.0
Has fix
npmPublished 21 Apr 2026
  • M
Server-side Request Forgery (SSRF)
Affects flowise-components | Versions <3.1.0
Has fix
npmPublished 21 Apr 2026
  • L
Server-side Request Forgery (SSRF)CVE-2026-43995
Affects flowise-components | Versions <3.1.0
Has fix
npmPublished 21 Apr 2026
  • H
Missing Authentication for Critical FunctionCVE-2026-41428
Affects @budibase/backend-core | Versions <3.35.10
Has fix
npmPublished 21 Apr 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-41271
Affects flowise-components | Versions <3.1.0
Has fix
npmPublished 21 Apr 2026
  • M
Command InjectionCVE-2026-40933
Affects flowise-components | Versions <3.1.0
Has fix
npmPublished 21 Apr 2026
  • M
Improper Verification of Cryptographic SignatureCVE-2026-41301
Affects openclaw | Versions <2026.3.31
Has fix
npmPublished 21 Apr 2026
  • M
Cleartext Transmission of Sensitive InformationCVE-2026-40045
Affects openclaw | Versions <2026.4.2
Has fix
npmPublished 21 Apr 2026
  • M
Directory Traversal
Affects flowise-components | Versions >=1.4.3 <3.1.0
Has fix
npmPublished 21 Apr 2026
  • C
Malicious Package
Affects apple-cloudkit-internal | Versions *
No fix available
npmPublished 21 Apr 2026
  • C
Malicious Package
Affects cktool.config | Versions *
No fix available
npmPublished 21 Apr 2026
  • C
Malicious Package
Affects cktool.core.internal | Versions *
No fix available
npmPublished 21 Apr 2026
  • C
Malicious Package
Affects ac-sasskit-internal | Versions *
No fix available
npmPublished 21 Apr 2026
  • C
Malicious Package
Affects apple-internal-security-poc-frank | Versions *
No fix available
npmPublished 21 Apr 2026