Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Prototype Pollution
CVE-2026-107353
Affects
traverse
| Versions
>=0.6.0 <0.6.12
>=0.5.0 <0.5.3
>=0.4.0 <0.4.7
>=0.3.6 <0.3.10
C
Embedded Malicious Code
Affects
tensorlake
| Versions
=0.5.144
M
Overly Restrictive Account Lockout Mechanism
CVE-2026-105866
Affects
@payloadcms/drizzle
| Versions
<3.90.0
>=4.0.0-canary.0 <4.0.0-canary.34
M
Overly Restrictive Account Lockout Mechanism
CVE-2026-105866
Affects
@payloadcms/next
| Versions
<3.90.0
>=4.0.0-canary.0 <4.0.0-canary.34
M
Overly Restrictive Account Lockout Mechanism
CVE-2026-105866
Affects
payload
| Versions
<3.90.0
>=4.0.0-canary.0 <4.0.0-canary.34
L
Origin Validation Error
CVE-2026-94486
Affects
next
| Versions
>=16.0.0 <16.3.8
M
Use of Cache Containing Sensitive Information
CVE-2026-94544
Affects
next
| Versions
>=16.3.0 <16.3.8
M
Use of Cache Containing Sensitive Information
CVE-2026-94484
Affects
next
| Versions
>=15.0.0 <15.5.27
>=16.0.0 <16.3.8
M
Origin Validation Error
CVE-2026-94485
Affects
next
| Versions
>=16.0.0 <16.3.8
M
Use of Cache Containing Sensitive Information
CVE-2026-94543
Affects
next
| Versions
>=15.0.0 <15.5.27
>=16.0.0 <16.3.8
<16.3.8
M
Use of Cache Containing Sensitive Information
CVE-2026-94544
Affects
next
| Versions
<16.3.8
M
Use of Cache Containing Sensitive Information
CVE-2026-94484
Affects
next
| Versions
>=16.0.0 <16.3.8
>=15.0.0 <15.5.27
M
Use of Cache Containing Sensitive Information
CVE-2026-103004
Affects
next
| Versions
>=16.3.0 <16.3.8
M
Cross-site Scripting (XSS)
CVE-2026-106444
Affects
handlebars
| Versions
<4.7.10
C
Incomplete List of Disallowed Inputs
CVE-2026-106445
Affects
handlebars
| Versions
>=4.6.0 <4.7.10
C
Malicious Package
Affects
windows_registry_editor
| Versions
=1.0.0
=0.0.1-security
C
Malicious Package
Affects
personio-pipeline-projen
| Versions
=1.171.31
C
Malicious Package
Affects
browser-metrics-plugin.contrib
| Versions
=2.0.1
=1.0.1
=99.0.1
=1.1.0
=1.0.0
=0.0.1
C
Malicious Package
Affects
store-webpack-config
| Versions
=1.0.0
=0.0.1-security
C
Malicious Package
Affects
troubleshooting
| Versions
=2.0.1
=1.1.0
=3.0.0
=99.0.1
=1.0.1
=1.0.0
=0.1.0
C
Malicious Package
Affects
css-jptvix-polyfill
| Versions
=1.0.0
C
Malicious Package
Affects
captchetat-angularv8
| Versions
*
C
Malicious Package
Affects
internallib_v875
| Versions
=1.0.1
C
Malicious Package
Affects
@pinecone-experience/messages
| Versions
=99.9.1
C
Malicious Package
Affects
hardhat-init
| Versions
=2.21.0
C
Malicious Package
Affects
internallib_v30
| Versions
=1.0.1
C
Malicious Package
Affects
internallib_v86
| Versions
=1.0.2
C
Malicious Package
Affects
internallib_v23
| Versions
=1.0.1
C
Malicious Package
Affects
virgil-cli
| Versions
=0.1.4
C
Malicious Package
Affects
checkmate-remediation-assistant
| Versions
=1.0.0