Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • L
Improper Check for Unusual or Exceptional ConditionsCVE-2026-65904
Affects dompurify | Versions <3.4.4
Has fix
npmPublished 25 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-65911
Affects dompurify | Versions <3.4.0
Has fix
npmPublished 25 Jul 2026
  • H
Improper Check for Unusual or Exceptional Conditions
Affects @auth/core | Versions >=0.1.0 <0.41.3
Has fix
npmPublished 25 Jul 2026
  • H
Improper Check for Unusual or Exceptional Conditions
Affects next-auth | Versions >=4.0.6 <4.24.15>=5.0.0-beta.0 <5.0.0-beta.32
Has fix
npmPublished 25 Jul 2026
  • C
Incorrect Behavior Order: Validate Before Canonicalize
Affects @auth/core | Versions >=0.1.0 <0.41.3
Has fix
npmPublished 25 Jul 2026
  • C
Incorrect Behavior Order: Validate Before Canonicalize
Affects next-auth | Versions >=4.10.3 <4.24.15>=5.0.0-beta.1 <5.0.0-beta.32
Has fix
npmPublished 25 Jul 2026
  • H
Improper Verification of Source of a Communication Channel
Affects @auth/core | Versions <0.41.3
Has fix
npmPublished 25 Jul 2026
  • H
Improper Verification of Source of a Communication Channel
Affects next-auth | Versions <4.24.15>=5.0.0-beta.1 <5.0.0-beta.32
Has fix
npmPublished 25 Jul 2026
  • C
Not Failing Securely ('Failing Open')
Affects next-auth | Versions >=5.0.0-beta.0 <5.0.0-beta.32
Has fix
npmPublished 25 Jul 2026
  • M
Information ExposureCVE-2026-66009
Affects parse-server | Versions >=8.2.2 <8.6.86>=9.0.0 <9.10.0-alpha.5
Has fix
npmPublished 25 Jul 2026
  • M
Information ExposureCVE-2026-66008
Affects parse-server | Versions >=8.2.2 <8.6.87>=9.0.0 <9.10.0-alpha.6
Has fix
npmPublished 25 Jul 2026
  • M
Information ExposureCVE-2026-64627
Affects parse-server | Versions <8.6.85>=9.0.0 <9.10.0-alpha.4
Has fix
npmPublished 25 Jul 2026
  • C
Malicious Package
Affects eth-slint | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects svgcraft-core | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects streak-lib-math | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects app-data-lts | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects app-node-layer | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects svelte-streak-metrics | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects svelte-goal-streak | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects chai-as-stringify | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects yuinpm | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects app-data-ist | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects eth-codergen | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects streak-bucket-lib | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects app-data-layer | Versions *
No fix available
npmPublished 24 Jul 2026
  • C
Malicious Package
Affects eth-base | Versions *
No fix available
npmPublished 24 Jul 2026
  • M
Command InjectionCVE-2026-16630
Affects @syncfusion/ej2-base | Versions <34.1.29
Has fix
npmPublished 23 Jul 2026
  • M
Command InjectionCVE-2026-65590
Affects @n8n/computer-use | Versions <0.13.2>=0.14.0 <0.14.1
Has fix
npmPublished 23 Jul 2026
  • H
Directory TraversalCVE-2026-15074
Affects @fastify/static | Versions <10.1.1
Has fix
npmPublished 23 Jul 2026
  • M
Incorrect Behavior Order: Validate Before CanonicalizeCVE-2026-7120
Affects @fastify/static | Versions <10.1.2
Has fix
npmPublished 23 Jul 2026