Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Uncontrolled Recursion
CVE-2026-59927
Affects
mistune
| Versions
[,3.3.0)
H
Inefficient Algorithmic Complexity
CVE-2026-59922
Affects
mistune
| Versions
[,3.3.0)
M
Cross-site Scripting (XSS)
CVE-2026-59926
Affects
mistune
| Versions
[,3.2.1)
M
Cross-site Scripting (XSS)
CVE-2026-59923
Affects
mistune
| Versions
[,3.3.0)
H
Inefficient Algorithmic Complexity
CVE-2026-59928
Affects
mistune
| Versions
[,3.3.0)
H
Directory Traversal
CVE-2026-59924
Affects
mistune
| Versions
[,3.3.0)
M
Excessive Iteration
CVE-2026-59937
Affects
pypdf
| Versions
[,6.14.0)
M
Memory Allocation with Excessive Size Value
CVE-2026-59938
Affects
pypdf
| Versions
[,6.14.0)
L
Symlink Attack
CVE-2026-14966
Affects
bbot
| Versions
[,3.0.0)
L
Directory Traversal
CVE-2026-14967
Affects
bbot
| Versions
[,3.0.0)
M
Arbitrary Command Injection
CVE-2026-15035
Affects
openllm
| Versions
[0,]
M
Server-side Request Forgery (SSRF)
CVE-2026-10177
Affects
aider-chat
| Versions
[0,]
M
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-10175
Affects
aider-chat
| Versions
[0,]
M
Incorrect Authorization
Affects
flask-security-too
| Versions
[5.8.0,]
M
Cross-site Request Forgery (CSRF)
Affects
ha-mcp
| Versions
[,7.7.0)
H
XML External Entity (XXE) Injection
CVE-2024-37388
Affects
ebookmeta
| Versions
[,1.2.8)
H
Server-side Request Forgery (SSRF)
CVE-2026-50127
Affects
weblate
| Versions
[5.15, 2026.6)
H
Missing Authorization
CVE-2026-58473
Affects
cognee
| Versions
[,1.2.0)
M
CRLF Injection
CVE-2026-53533
Affects
aiosmtplib
| Versions
[,5.1.1)
M
Open Redirect
CVE-2026-40961
Affects
apache-airflow-core
| Versions
[,3.2.2rc1)
L
Use of Cache Containing Sensitive Information
CVE-2026-48588
Affects
django
| Versions
[,5.2.16)
[6.0a1,6.0.7)
M
Buffer Access with Incorrect Length Value
CVE-2026-53877
Affects
django
| Versions
[,5.2.16)
[6.0a1,6.0.7)
M
Improper Neutralization
CVE-2026-53878
Affects
django
| Versions
[,5.2.16)
[6.0a1,6.0.7)
H
Cross-site Scripting (XSS)
CVE-2025-46719
Affects
open-webui
| Versions
[,0.6.6)
H
Server-side Request Forgery (SSRF)
CVE-2026-34225
Affects
open-webui
| Versions
[,0.9.5)
H
Cross-site Scripting (XSS)
CVE-2026-26192
Affects
open-webui
| Versions
[,0.7.0)
H
Cross-site Scripting (XSS)
CVE-2026-26193
Affects
open-webui
| Versions
[,0.7.0)
M
Cross-site Scripting (XSS)
CVE-2025-46571
Affects
open-webui
| Versions
[,0.6.6)
M
NULL Pointer Dereference
CVE-2026-44512
Affects
onnx
| Versions
[1.9.0,1.22.0)
H
Use After Free
CVE-2026-24266
Affects
nvidia-pytriton
| Versions
[0,]