Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
Malicious Package
Affects
azure-langchain-example
| Versions
[0.1.0]
C
Malicious Package
Affects
scrapetools2
| Versions
[0,]
C
Malicious Package
Affects
aseity
| Versions
[0,]
M
Protection Mechanism Failure
CVE-2026-77401
Affects
accesscontrol
| Versions
[,7.4)
M
Not Failing Securely ('Failing Open')
CVE-2026-105161
Affects
aiir
| Versions
[,1.7.0)
H
Symlink Attack
CVE-2026-55074
Affects
ansible-jailexec
| Versions
[,2.0.0)
H
Allocation of Resources Without Limits or Throttling
Affects
atomic-agents-stack
| Versions
[,1.1.0)
H
Directory Traversal
Affects
atomic-agents-stack
| Versions
[,1.1.0)
H
Resources Downloaded over Insecure Protocol
Affects
atomic-agents-stack
| Versions
[,1.1.0)
C
Malicious Package
Affects
caracas4check
| Versions
[1.1.1]
[1.1.2]
C
Malicious Package
Affects
coinscan
| Versions
[0.1.0]
H
Arbitrary Code Injection
CVE-2026-54757
Affects
compliance-trestle
| Versions
[,3.12.4)
[4.0.0,4.1.0)
H
Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-57170
Affects
compliance-trestle
| Versions
[,3.12.4)
[4.0.0,4.1.0)
H
Directory Traversal
CVE-2026-57171
Affects
compliance-trestle
| Versions
[,3.12.4)
[4.0.0,4.1.0)
M
Incorrect Authorization
CVE-2026-70657
Affects
copyparty
| Versions
[,1.20.17)
C
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-61732
Affects
decepticon-core
| Versions
[,1.1.17)
C
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-61732
Affects
decepticon
| Versions
[,1.1.17)
C
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-61732
Affects
decepticon-sdk
| Versions
[,1.1.17)
M
Missing Critical Step in Authentication
CVE-2026-54723
Affects
devpi-server
| Versions
[,6.20.2)
H
Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-53964
Affects
document-merge-service
| Versions
[0,]
H
Improper Encoding or Escaping of Output
CVE-2026-55618
Affects
eml-parser
| Versions
[,3.0.2)
M
Excessively Deep Nesting
CVE-2026-55619
Affects
eml-parser
| Versions
[,3.0.2)
H
Excessively Deep Nesting
CVE-2026-55620
Affects
eml-parser
| Versions
[,3.0.2)
H
Binding to an Unrestricted IP Address
CVE-2026-59177
Affects
esphome-device-builder
| Versions
[,1.0.10)
C
Missing Authentication for Critical Function
CVE-2026-59178
Affects
esphome-device-builder
| Versions
[,1.0.12)
M
Insertion of Sensitive Information into Log File
CVE-2026-9073
Affects
foreman-mcp-server
| Versions
[0,]
H
Missing Authorization
CVE-2026-55178
Affects
geolens-cli
| Versions
[,1.2.3)
H
Missing Authorization
CVE-2026-55178
Affects
geolens
| Versions
[,1.2.3)
H
Use of Cache Containing Sensitive Information
Affects
geolens
| Versions
[,1.2.4)
M
Relative Path Traversal
CVE-2026-50024
Affects
githacker
| Versions
[,1.1.10)