Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Incorrect Authorization
CVE-2026-106461
Affects
@backstage/plugin-scaffolder-backend
| Versions
<4.1.0
M
Information Exposure
CVE-2026-106506
Affects
@backstage/plugin-scaffolder-backend
| Versions
<4.1.0
M
Insertion of Sensitive Information into Log File
CVE-2026-106499
Affects
@backstage/plugin-scaffolder-backend
| Versions
<4.1.0
M
Insertion of Sensitive Information into Log File
CVE-2026-106502
Affects
@backstage/plugin-scaffolder-backend
| Versions
<4.1.0
C
Race Condition
CVE-2026-106500
Affects
@backstage/plugin-scaffolder-backend
| Versions
<3.3.1
>=3.4.0 <3.4.1
>=4.0.0 <4.0.3
>=4.0.4 <4.1.0
C
Insertion of Sensitive Information Into Sent Data
CVE-2026-106501
Affects
@backstage/plugin-scaffolder-backend
| Versions
<3.3.1
>=3.4.0 <3.4.1
>=4.0.0 <4.0.3
>=4.0.4 <4.1.0
L
Incorrect Authorization
CVE-2026-106496
Affects
@backstage/plugin-catalog-backend
| Versions
<3.9.1
H
Server-side Request Forgery (SSRF)
CVE-2026-106498
Affects
@backstage/plugin-catalog-backend
| Versions
<3.9.1
M
External Control of File Name or Path
CVE-2026-106494
Affects
@backstage/backend-defaults
| Versions
<0.17.8
L
Directory Traversal
CVE-2026-106493
Affects
@backstage/plugin-catalog-backend-module-azure
| Versions
<0.3.21
L
Directory Traversal
CVE-2026-106493
Affects
@backstage/plugin-catalog-backend-module-aws
| Versions
<0.4.27
L
Directory Traversal
CVE-2026-106493
Affects
@backstage/backend-defaults
| Versions
<0.17.8
H
Incorrect Authorization
CVE-2026-106492
Affects
@backstage/backend-defaults
| Versions
<0.16.1
>=0.17.0 <0.17.8
H
Insufficient Session Expiration
CVE-2026-107721
Affects
fast-jwt
| Versions
<6.3.0
H
Improper Validation of Specified Type of Input
CVE-2026-107723
Affects
fast-jwt
| Versions
<6.3.0
L
Insufficient Session Expiration
CVE-2026-107719
Affects
fast-jwt
| Versions
<6.3.4
C
Improper Verification of Cryptographic Signature
CVE-2026-107720
Affects
fast-jwt
| Versions
<6.3.1
C
Improper Verification of Cryptographic Signature
CVE-2026-107724
Affects
fast-jwt
| Versions
>=6.2.4 <6.3.0
C
Improper Verification of Cryptographic Signature
CVE-2026-107722
Affects
fast-jwt
| Versions
>=6.2.0 <6.3.0
C
Malicious Package
Affects
react-dropzone-v4
| Versions
=99.0.0
M
Open Redirect
CVE-2026-107718
Affects
@adonisjs/http-server
| Versions
<8.2.3
>=9.0.0 <9.3.0
H
Uncaught Exception
CVE-2026-96294
Affects
thrift
| Versions
<0.25.0
C
Malicious Package
Affects
@library-wide/library-shell
| Versions
=99.9.1
C
Malicious Package
Affects
kmf-bootstrap
| Versions
=100.100.103
=100.100.102
C
Malicious Package
Affects
kmf-i18n
| Versions
=100.100.102
C
Malicious Package
Affects
@myorder-frontend-commons/analytics
| Versions
=3.0.0
=10.0.0
=99.0.0
C
Malicious Package
Affects
test-account-portal-fe
| Versions
=100.100.102
C
Malicious Package
Affects
arsya-baileys
| Versions
=9.2.2
=9.2.4
=9.2.1
=9.2.3
C
Malicious Package
Affects
cloud-baileys
| Versions
=1.1.42
=1.1.41
=1.1.40
=1.1.39
=1.1.38
=1.1.37
=1.1.36
=1.1.35
=1.1.34
=1.1.33
=1.1.3
=1.1.2
=1.1.1
=1.1.0
=1.0.5
=1.0.4
=1.0.3
=1.0.2
=1.0.1
=1.0.0
C
Malicious Package
Affects
@fer2809fl/baileys
| Versions
=7.0.7
=7.0.6
=7.0.5
=7.0.4
=7.0.2
=7.0.1
=7.0.0
=7.0.0-rc13
=1.4.9
=1.4.7
=1.4.6
=1.4.5