Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Not Failing Securely ('Failing Open')
Affects next-auth | Versions >=5.0.0-beta.0 <5.0.0-beta.32
Has fix
npmPublished 25 Jul 2026
  • M
Information ExposureCVE-2026-66009
Affects parse-server | Versions >=8.2.2 <8.6.86>=9.0.0 <9.10.0-alpha.5
Has fix
npmPublished 25 Jul 2026
  • M
Information ExposureCVE-2026-66008
Affects parse-server | Versions >=8.2.2 <8.6.87>=9.0.0 <9.10.0-alpha.6
Has fix
npmPublished 25 Jul 2026
  • M
Information ExposureCVE-2026-64627
Affects parse-server | Versions <8.6.85>=9.0.0 <9.10.0-alpha.4
Has fix
npmPublished 25 Jul 2026
  • C
Malicious Package
Affects eth-slint | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects svgcraft-core | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects streak-lib-math | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects app-data-lts | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects app-node-layer | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects svelte-streak-metrics | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects svelte-goal-streak | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects chai-as-stringify | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects yuinpm | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects app-data-ist | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects eth-codergen | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects streak-bucket-lib | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects app-data-layer | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects eth-base | Versions *
No fix available
npmPublished 24 Jul 2026
  • M
Command InjectionCVE-2026-16630
Affects @syncfusion/ej2-base | Versions <34.1.29
Has fix
npmPublished 23 Jul 2026
  • M
Command InjectionCVE-2026-65590
Affects @n8n/computer-use | Versions <0.13.2>=0.14.0 <0.14.1
Has fix
npmPublished 23 Jul 2026
  • H
Directory TraversalCVE-2026-15074
Affects @fastify/static | Versions <10.1.1
Has fix
npmPublished 23 Jul 2026
  • M
Incorrect Behavior Order: Validate Before CanonicalizeCVE-2026-7120
Affects @fastify/static | Versions <10.1.2
Has fix
npmPublished 23 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-64645
Affects next | Versions >=12.0.0 <15.5.21>=16.0.0 <16.2.11
Has fix
npmPublished 23 Jul 2026
  • M
Use of Cache Containing Sensitive InformationCVE-2026-64648
Affects next | Versions >=13.0.0 <15.5.21>=16.0.0 <16.2.11
Has fix
npmPublished 23 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-64649
Affects next | Versions >=14.1.1 <15.5.21>=16.0.0 <16.2.11
Has fix
npmPublished 23 Jul 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-64641
Affects next | Versions >=13.0.0 <15.5.21>=16.0.0 <16.2.11
Has fix
npmPublished 23 Jul 2026
  • M
Insertion of Sensitive Information Into Sent DataCVE-2026-64643
Affects next | Versions >=13.0.0 <15.5.21>=16.0.0 <16.2.11
Has fix
npmPublished 23 Jul 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-64646
Affects next | Versions >=13.0.0 <15.5.21>=16.0.0 <16.2.11
Has fix
npmPublished 23 Jul 2026
  • M
Inefficient Algorithmic ComplexityCVE-2026-64644
Affects next | Versions >=15.5.0 <15.5.21>=16.0.0 <16.2.11
Has fix
npmPublished 23 Jul 2026
  • M
Improper Encoding or Escaping of OutputCVE-2026-64647
Affects next | Versions >=13.0.0 <15.5.21>=16.0.0 <16.2.11
Has fix
npmPublished 23 Jul 2026