Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Symlink Attack
CVE-2026-107608
Affects
aws-cdk-lib
| Versions
<2.267.0
C
Malicious Package
Affects
ksp-client-registry
| Versions
=100.100.101
=100.100.100
C
Malicious Package
Affects
@coopeuch/components
| Versions
=1.999.999
C
Malicious Package
Affects
@coopeuch/core
| Versions
=1.999.999
C
Malicious Package
Affects
deposit-limit-fe
| Versions
=100.100.102
=100.100.101
=100.100.106
C
Malicious Package
Affects
liferay-workspace-scripts
| Versions
=99.9.1
C
Malicious Package
Affects
@s4yhiitestpoc/scan-https-d
| Versions
=1.0.0
C
Malicious Package
Affects
nitro-cjs-requirer
| Versions
=3.0.0
=99.0.1
=2.0.0
=1.1.0
=0.0.1
=1.0.0
C
Malicious Package
Affects
@s4yhiitestpoc/r3-https
| Versions
=1.0.0
C
Malicious Package
Affects
react-paginate-v5
| Versions
=99.0.0
C
Malicious Package
Affects
cloudflare_module
| Versions
=1.0.0
=1.0.1
=3.0.0
C
Malicious Package
Affects
nitro-bundled-dep
| Versions
=1.1.0
=2.0.1
=99.0.1
C
Malicious Package
Affects
@coopeuch/common
| Versions
=1.999.999
C
Malicious Package
Affects
pay-methods-kmf
| Versions
=100.100.101
=100.100.100
=100.100.102
C
Malicious Package
Affects
another-very-long-name
| Versions
=1.1.0
=2.0.1
=1.0.1
=2.0.0
C
Malicious Package
Affects
ksp-app
| Versions
=100.100.100
C
Malicious Package
Affects
@s4yhiitestpoc/r2-https
| Versions
=1.0.0
C
Malicious Package
Affects
@coopeuch/button
| Versions
=1.999.999
C
Malicious Package
Affects
nested-lib
| Versions
=1.1.0
=1.0.1
=1.0.0
C
Malicious Package
Affects
some-very-long-package-name
| Versions
=2.0.1
=3.0.0
=1.0.0
=2.0.0
C
Malicious Package
Affects
@coopeuch/config
| Versions
=1.999.999
H
Authorization Bypass Through User-Controlled Key
CVE-2026-105867
Affects
@payloadcms/storage-s3
| Versions
<3.90.0
>=4.0.0-canary.0 <4.0.0-canary.34
H
Missing Authorization
CVE-2026-105806
Affects
@payloadcms/plugin-mcp
| Versions
>=3.61.0 <3.88.0
M
Directory Traversal
CVE-2026-106491
Affects
@backstage/plugin-proxy-backend
| Versions
<0.6.17
M
Incorrect Authorization
CVE-2026-106463
Affects
@backstage/plugin-catalog-backend-module-gitlab
| Versions
<0.8.7
H
Improper Verification of Cryptographic Signature
CVE-2026-106488
Affects
@backstage/plugin-auth-backend-module-oidc-provider
| Versions
<0.4.20
H
External Control of File Name or Path
CVE-2026-106559
Affects
@backstage/plugin-scaffolder-backend-module-confluence-to-markdown
| Versions
<0.3.25
M
Missing Authorization
CVE-2026-106563
Affects
@backstage/plugin-kubernetes-backend
| Versions
<0.21.8
H
Directory Traversal
CVE-2026-106560
Affects
@backstage/plugin-scaffolder-backend-module-confluence-to-markdown
| Versions
<0.3.25
H
Improper Verification of Cryptographic Signature
CVE-2026-106457
Affects
@backstage/plugin-auth-backend-module-cloudflare-access-provider
| Versions
>=0.1.0 <0.5.0