Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Cross-site Scripting (XSS)
CVE-2026-104477
Affects
showdown
| Versions
*
H
Uncaught Exception
CVE-2026-102984
Affects
astro
| Versions
<7.2.3
C
Improper Certificate Validation
CVE-2026-103921
Affects
@graphql-tools/url-loader
| Versions
<9.1.9
C
Improper Certificate Validation
CVE-2026-103921
Affects
@graphql-tools/executor-legacy-ws
| Versions
<1.1.35
C
Interpretation Conflict
Affects
@nestjs/platform-fastify
| Versions
<11.2.4
>=12.0.0 <12.0.2
H
Regular Expression Denial of Service (ReDoS)
CVE-2026-105219
Affects
mammoth
| Versions
<1.12.3
H
Allocation of Resources Without Limits or Throttling
CVE-2023-54404
Affects
zod
| Versions
<4.6.6
H
Inefficient Algorithmic Complexity
CVE-2026-104844
Affects
postcss-selector-parser
| Versions
<7.1.6
H
Regular Expression Denial of Service (ReDoS)
CVE-2026-102990
Affects
basic-ftp
| Versions
<6.2.1
L
Reliance on Untrusted Inputs in a Security Decision
CVE-2026-103923
Affects
katex
| Versions
>=0.11.0 <0.18.2
H
Allocation of Resources Without Limits or Throttling
Affects
@nestjs/microservices
| Versions
<11.2.5
>=12.0.0 <12.0.3
M
Server-side Request Forgery (SSRF)
CVE-2026-102983
Affects
@astrojs/netlify
| Versions
>=5.2.0 <8.2.4
H
Allocation of Resources Without Limits or Throttling
CVE-2026-104845
Affects
seroval
| Versions
<1.6.3
C
Access of Resource Using Incompatible Type ('Type Confusion')
CVE-2026-104846
Affects
seroval
| Versions
>=0.12.0 <1.6.2
H
Access Control Bypass
CVE-2026-104854
Affects
nx
| Versions
>=14.6.0 <22.7.9
>=23.0.0 <23.1.2
M
Directory Traversal
CVE-2026-104853
Affects
nx
| Versions
>=13.10.0 <22.7.10
>=23.0.0 <23.2.1
H
Command Injection
CVE-2026-104859
Affects
@nx/docker
| Versions
>=21.4.0 <22.7.8
>=23.0.0 <23.1.1
C
Prototype Pollution
CVE-2026-102992
Affects
piscina
| Versions
<4.9.4
>=5.0.0 <5.3.2
>=6.0.0-rc.1 <6.0.0-rc.5
H
Improper Handling of Length Parameter Inconsistency
CVE-2026-83745
Affects
thrift
| Versions
<0.25.0
H
Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-94646
Affects
thrift
| Versions
<0.25.0
M
Directory Traversal
CVE-2026-104871
Affects
@angular/ssr
| Versions
<20.3.36
>=21.0.0 <21.2.23
>=22.0.0 <22.1.7
>=22.2.0-next.0 <22.2.0-next.6
M
Prototype Pollution
Affects
devalue
| Versions
<5.9.3
L
Memory Allocation with Excessive Size Value
Affects
devalue
| Versions
>=1.0.0 <5.9.3
H
Uncaught Exception
Affects
devalue
| Versions
>=5.8.0 <5.9.3
H
Improper Handling of Highly Compressed Data (Data Amplification)
Affects
devalue
| Versions
<5.9.3
M
Inefficient Algorithmic Complexity
Affects
devalue
| Versions
<5.9.3
C
Malicious Package
Affects
turbo-ws
| Versions
=1.0.0
C
Malicious Package
Affects
@smwebserver/static
| Versions
=99.9.1
C
Malicious Package
Affects
ui.dist.min.js
| Versions
*
C
Malicious Package
Affects
translate-base-font
| Versions
*