Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
Malicious Package
Affects
karpatkit
| Versions
[2.1.1]
[2.1.0]
C
Malicious Package
Affects
govpkg
| Versions
[0.2.0]
[0.1.0]
C
Incorrect Authorization
CVE-2026-18236
Affects
google-adk
| Versions
[,1.38.0)
[2.0.0a1, 2.5.0)
L
Improper Validation of Syntactic Correctness of Input
CVE-2026-62995
Affects
joserfc
| Versions
[,1.7.2)
M
Directory Traversal
CVE-2026-13346
Affects
pip
| Versions
[,26.2)
H
Improper Certificate Validation
CVE-2026-66053
Affects
thrift
| Versions
[,0.24.0)
H
Improper Verification of Cryptographic Signature
CVE-2026-59243
Affects
apache-airflow-providers-fab
| Versions
[, 3.7.3)
H
Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-48586
Affects
thrift
| Versions
[,0.24.0)
H
Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-41608
Affects
thrift
| Versions
[,0.24.0)
H
Directory Traversal
CVE-2026-55389
Affects
datamodel-code-generator
| Versions
[,0.62.0)
H
Arbitrary Code Injection
CVE-2026-54656
Affects
datamodel-code-generator
| Versions
[0.52.1, 0.60.2)
H
Exposure of Private Personal Information to an Unauthorized Actor
CVE-2026-55403
Affects
datamodel-code-generator
| Versions
[,0.63.0)
H
Arbitrary Code Injection
CVE-2026-54655
Affects
datamodel-code-generator
| Versions
[,0.60.2)
H
Directory Traversal
CVE-2026-55390
Affects
datamodel-code-generator
| Versions
[,0.62.0)
H
Server-side Request Forgery (SSRF)
CVE-2026-54691
Affects
datamodel-code-generator
| Versions
[0.9.1, 0.61.0)
H
Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-54654
Affects
datamodel-code-generator
| Versions
[0.14.1, 0.60.2)
H
Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-54621
Affects
datamodel-code-generator
| Versions
[0.25.0, 0.60.1)
H
Server-side Request Forgery (SSRF)
CVE-2026-55391
Affects
datamodel-code-generator
| Versions
[,0.63.0)
H
Server-side Request Forgery (SSRF)
CVE-2026-54690
Affects
datamodel-code-generator
| Versions
[0.9.1,0.61.0)
H
Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-54653
Affects
datamodel-code-generator
| Versions
[0.17.0,0.60.2)
H
Eval Injection
CVE-2026-55415
Affects
datamodel-code-generator
| Versions
[0.11.6,0.64.0)
C
Malicious Package
Affects
cfgzen
| Versions
[0,]
C
Malicious Package
Affects
mrmustard
| Versions
[0.7.4]
H
Incorrect Authorization
Affects
vantage6
| Versions
[0,]
M
Heap-based Buffer Overflow
CVE-2026-54559
Affects
pocketsphinx
| Versions
[,5.1.1)
H
Arbitrary File Upload
CVE-2026-54567
Affects
flask-reuploaded
| Versions
[,1.6.0)
M
Cross-site Scripting (XSS)
CVE-2026-54503
Affects
plone.app.textfield
| Versions
[,2.0.2)
[3.0.0,3.0.2)
[4.0.0,4.0.1)
M
Cross-site Scripting (XSS)
CVE-2026-54503
Affects
plone.restapi
| Versions
[,9.15.6)
[10.0.0,10.0.1)
H
Arbitrary Command Injection
CVE-2026-54449
Affects
langbot
| Versions
[0,]
C
Use of Hard-coded Credentials
CVE-2026-61740
Affects
lightrag-hku
| Versions
[,1.5.4)