Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Directory Traversal
CVE-2026-48796
Affects
cefsharp.common
| Versions
[53.0.0, 148.0.90)
H
Arbitrary Code Injection
CVE-2026-45555
Affects
roslyncodelens.mcp
| Versions
[0.0.9,1.17.0)
M
Allocation of Resources Without Limits or Throttling
CVE-2026-55254
Affects
ncalc.core
| Versions
[,6.1.1)
M
Cross-site Scripting (XSS)
CVE-2025-70842
Affects
fluentcms.web.plugins.admin
| Versions
[0,]
M
Arbitrary File Upload
Affects
dotvvm
| Versions
[,4.2.11)
[4.3.0,4.3.15)
[5.0.0-preview02-final,5.0.0-preview09-final)
C
Missing Authorization
Affects
dotvvm
| Versions
[,4.2.11)
[4.3.0,4.3.15)
[5.0.0-preview02-final,5.0.0-preview09-final)
H
Regular Expression Denial of Service (ReDoS)
Affects
dotvvm
| Versions
[,4.2.11)
[4.3.0,4.3.15)
[5.0.0-preview02-final,5.0.0-preview09-final)
H
Arbitrary Argument Injection
CVE-2026-48793
Affects
jellyfin.common
| Versions
[,10.11.10)
H
Directory Traversal
CVE-2026-49247
Affects
jellyfin.common
| Versions
[10.9.0,10.11.10)
M
Cross-site Scripting (XSS)
CVE-2026-49220
Affects
jellyfin.common
| Versions
[,10.11.9)
M
Directory Traversal
CVE-2026-49246
Affects
jellyfin.common
| Versions
[,10.11.10)
M
Allocation of Resources Without Limits or Throttling
Affects
scriban
| Versions
[3.0.0,7.2.1)
M
Uncontrolled Recursion
Affects
scriban
| Versions
[6.6.0,7.2.1)
M
Insecure Default Initialization of Resource
CVE-2026-48509
Affects
messagepack.aspnetcoremvcformatter
| Versions
[,2.5.301)
[3.0,3.1.7)
M
Insecure Default Initialization of Resource
CVE-2026-48509
Affects
messagepack
| Versions
[,2.5.301)
[3.0,3.1.7)
H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-48502
Affects
messagepack
| Versions
[3.0,3.1.7)
M
Deserialization of Untrusted Data
CVE-2026-48517
Affects
messagepack
| Versions
[,2.5.301)
[3.0,3.1.7)
M
Inefficient Algorithmic Complexity
CVE-2026-48516
Affects
messagepack
| Versions
[,2.5.301)
[3.0,3.1.7)
M
Allocation of Resources Without Limits or Throttling
CVE-2026-48514
Affects
messagepack
| Versions
[,2.5.301)
[3.0,3.1.7)
M
Uncontrolled Recursion
CVE-2026-48513
Affects
messagepack
| Versions
[,2.5.301)
[3.0,3.1.7)
M
Allocation of Resources Without Limits or Throttling
CVE-2026-48515
Affects
messagepack
| Versions
[,2.5.301)
[3.0,3.1.7)
M
Inefficient Algorithmic Complexity
CVE-2026-48511
Affects
messagepack
| Versions
[,2.5.301)
[3.0,3.1.7)
M
Uncontrolled Recursion
CVE-2026-48512
Affects
messagepack
| Versions
[,2.5.301)
[3.0,3.1.7)
H
Uncontrolled Recursion
CVE-2026-48506
Affects
messagepack
| Versions
[,2.5.301)
[3.0,3.1.7)
M
Allocation of Resources Without Limits or Throttling
CVE-2026-48510
Affects
messagepack
| Versions
[,2.5.301)
[3.0,3.1.7)
H
Improper Validation of Syntactic Correctness of Input
CVE-2026-50196
Affects
steeltoe.discovery.eureka
| Versions
[,3.4.0)
[4.0.0,4.2.0)
H
Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-54777
Affects
corewcf.netnamedpipe
| Versions
[1.4.0-preview1,1.8.1)
[1.9.0, 1.9.1)
M
Expired Pointer Dereference
CVE-2026-54778
Affects
corewcf.unixdomainsocket
| Versions
[1.5.0-preview1,1.8.1)
[1.9.0,1.9.1)
C
Improper Verification of Cryptographic Signature
CVE-2026-54782
Affects
corewcf.primitives
| Versions
[1.0.0-preview1,1.8.1)
[1.9.0,1.9.1)
C
Improper Verification of Cryptographic Signature
CVE-2026-54783
Affects
corewcf.primitives
| Versions
[,1.8.1)
[1.9.0,1.9.1)